[30450] in Kerberos
Re: Kbrfw: failed to decrypt password
daemon@ATHENA.MIT.EDU (Robert Marcano)
Fri Nov 14 11:43:41 2008
From: Robert Marcano <robert@marcanoonline.com>
To: Ken Raeburn <raeburn@mit.edu>
In-Reply-To: <FFA30AB3-AA32-4734-912A-9CF44175A091@mit.edu>
Date: Fri, 14 Nov 2008 12:12:15 -0430
Message-Id: <1226680935.3491.3.camel@localhost.localdomain>
Mime-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Thu, 2008-11-13 at 19:22 -0500, Ken Raeburn wrote:
> On Nov 13, 2008, at 17:55, Robert Marcano wrote:
> > When a password is expired i have problems to replace it with a new
> > password on Windows clients:
> >
> > With kinit:
> >
> > Password expired. You must change it now.
> > Enter new password:
> > Enter it again:
> > kinit(v5): Password change failed while getting initial credentials
> >
> > With kpasswd and Network Identity Manager: "failed to decrypt
> > password"
> >
> > On a Linux client I am able to update the password without problems
> > using kpasswd or kinit. Those errors only happens on MIT kerberos for
> > Windows, any help is appreciated.
>
> What's the network configuration like? The password changing protocol
> may not work through a NAT box.
>
yes that was the reason, Windows was running on an VM (virtualbox.org)
on my laptop connected to the net using NAT. So this test passed :-),
but I think this will cause me a little trouble on production when a
user is behind of one of those wireless routers that do NAT by default
Thanks...
> Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
