--- a/make-sso	Fri Jan 11 05:41:41 2013 -0500
+++ b/make-sso	Fri Jan 18 19:59:50 2013 -0500
@@ -150,11 +150,11 @@
 
 # seeds /dev/random rather nicely...
 screen -dmS hasher sh -c "find /usr/lib/ /usr/share/ -print0 -type f | xargs -0 -n1 sha1sum"
-if [ -f /var/lib/krb5kdc/principal ]; then
-	rm -fv /var/lib/krb5kdc/principal \
-			/var/lib/krb5kdc/principal.kadm5 \
-			/var/lib/krb5kdc/principal.kadm5.lock \
-			/var/lib/krb5kdc/principal.ok
+if [ -f /etc/krb5kdc/principal ]; then
+	rm -fv /etc/krb5kdc/principal \
+			/etc/krb5kdc/principal.kadm5 \
+			/etc/krb5kdc/principal.kadm5.lock \
+			/etc/krb5kdc/principal.ok
 fi
 echo -en "${stash_pw}\n${stash_pw}\n" | kdb5_util create -s
 

--- a/resources/functions	Fri Jan 11 05:41:41 2013 -0500
+++ b/resources/functions	Fri Jan 18 19:59:50 2013 -0500
@@ -257,8 +257,8 @@
 
 [realms]
 	$krb5_realm = {
-		database_name = /var/lib/krb5kdc/principal
-		key_stash_file = /etc/krb5kdc/stash
+		database_name = /etc/krb5kdc/principal
+		key_stash_file = /etc/krb5kdc/.k5.$krb5_realm
 	}
 
 EOF