[22211] in Kerberos
RE: Problem changing expired Windows 2000 passwords
daemon@ATHENA.MIT.EDU (Tim Alsop)
Tue Aug 17 12:14:39 2004
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Date: Tue, 17 Aug 2004 17:12:03 +0100
Message-ID: <0D8F2EFD3A10E24DAEEA48EA6DA07D30061EDE@postman-pat.csafe.local>
From: "Tim Alsop" <Tim.Alsop@cybersafe.ltd.uk>
To: "Jeffrey Altman" <jaltman2@nyc.rr.com>, <kerberos@mit.edu>
Content-Transfer-Encoding: 8bit
Errors-To: kerberos-bounces@mit.edu
The "Windows cache" is the cache which you can view when using
kerbtray.exe. I didn't try, but I guess you would also see this when
using klist.exe or any other tool that looks in LSA cache.
Tim.
-----Original Message-----
From: kerberos-bounces@MIT.EDU [mailto:kerberos-bounces@MIT.EDU] On
Behalf Of Jeffrey Altman
Sent: 17 August 2004 16:46
To: kerberos@MIT.EDU
Subject: Re: Problem changing expired Windows 2000 passwords
What is "Windows cache"? Do you mean "KLIST"? "KERBTRAY"?
Or do you mean the ClientName and ClientRealm fields of
KERB_TICKET.... structures?
Tim Alsop wrote:
> Hi,
>
> I am not sure if this is useful or not, but we recently noticed
> something odd when logging in with user@REALM. If you login with an
> account name of this format and the account is set to use DES keys the
> client principal name shown in Windows cache is user@domain@REALM
> instead of user@REALM ...
>
> Regards, Tim.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
