[22209] in Kerberos
RE: Problem changing expired Windows 2000 passwords
daemon@ATHENA.MIT.EDU (Tim Alsop)
Tue Aug 17 11:32:21 2004
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Date: Tue, 17 Aug 2004 16:29:41 +0100
Message-ID: <0D8F2EFD3A10E24DAEEA48EA6DA07D30061EDC@postman-pat.csafe.local>
From: "Tim Alsop" <Tim.Alsop@cybersafe.ltd.uk>
To: "Jeffrey Altman" <jaltman2@nyc.rr.com>, <kerberos@mit.edu>
Content-Transfer-Encoding: 8bit
Errors-To: kerberos-bounces@mit.edu
Hi,
I am not sure if this is useful or not, but we recently noticed
something odd when logging in with user@REALM. If you login with an
account name of this format and the account is set to use DES keys the
client principal name shown in Windows cache is user@domain@REALM
instead of user@REALM ...
Regards, Tim.
-----Original Message-----
From: kerberos-bounces@MIT.EDU [mailto:kerberos-bounces@MIT.EDU] On
Behalf Of Jeffrey Altman
Sent: 17 August 2004 16:06
To: kerberos@MIT.EDU
Subject: Re: Problem changing expired Windows 2000 passwords
I believe this is a documented bug which Microsoft chooses not to
fix. The user is required to login using
user@REALM
instead of just the username.
Jeffrey Altman
rodolfo@ime.unicamp.br wrote:
> Hi!
>
> We have a Windows 2000 domain with workstations performing
authentication
> at a MIT Kerberos KDC. It works fine but, if the user's password has
> expired, the Windows workstations displays it's normal "password
expired"
> alert, but when the user tries to change this password, Windows shows
the
> "domain not available" message.
>
> Running tcpdump at the kdc, I show no kerberos related traffic when
this
> password-change is tried.
>
> There is a article at Microsoft about a similar problem, but it says
the
> issue is solved with service pack 1. We have service pack 4 at our
> windows workstations.
>
> Some idea???
>
> Tnks!
>
> []s!
> Rodolfo
>
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
--
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
