[29571] in Kerberos
Re: Password changed too recently
daemon@ATHENA.MIT.EDU (Russ Allbery)
Mon Mar 24 20:34:44 2008
To: kerberos@mit.edu
In-Reply-To: <47E83939.7040207@kickflop.net> (Jeff Blaine's message of "Mon\,
24 Mar 2008 19\:28\:57 -0400")
From: Russ Allbery <rra@stanford.edu>
Date: Mon, 24 Mar 2008 17:33:36 -0700
Message-ID: <873aqf8wwv.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Jeff Blaine <jblaine@kickflop.net> writes:
> Is there a way to override this restriction? We can't
> have this in our way.
> > % /usr/rcf-krb5/bin/kpasswd
> > Password for joeschmoe@OURHOST.FOO.COM
> > Enter new password:
> > Enter it again:
> > Password change rejected: Password cannot be changed because it was
> > changed too recently.
> > Please wait until Mon Mar 31 14:42:25 2008 before you change it.
> > If you need to change your password before then, contact your system
> > security administrator.
I'm pretty sure you have to go out of your way to get this behavior and
it's not the default. Check to see if -minlife was set in your password
policy. If so, unset that. (This is assuming that you use MIT Kerberos.)
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
