[22808] in Kerberos
Password change (MIT kerberos & Windows AD)
daemon@ATHENA.MIT.EDU (Sven Kivistik)
Wed Nov 3 06:51:26 2004
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Date: Wed, 3 Nov 2004 13:47:18 +0200
Message-ID: <CF3FE88B3B009A4A82CF0D3CCCD92D7220EAB9@hermes.account.ad.eypsise>
From: "Sven Kivistik" <sven.kivistik@eyp.ee>
To: <kerberos@mit.edu>
Content-Transfer-Encoding: 8bit
Errors-To: kerberos-bounces@mit.edu
Hi
I have following problem.
MIT kerberos working together with Windows 2000 domain with cross-realm
trust.
Users can authenticate themselves in W2K workstation against MIT
kerberos realm.
As I see everything works fine with authentication.
But....
When user attempts to change his/her Kerberos password password change
attempt fail with following error:
"Unable to change the password on this account due to the following
error: 1326: Logon Failure : unknown user name or bad password"
Currently we have implemented Kerberos user names with first capital
letter.
For testing purpouse I created user name with only small letters. And
Voila. Password changed successfully.
So when user name consist only small letters password change works but
when user name first letter is capitalized password change does not
work..... Where is the problem????
******
kdc.log
Nov 2 12:03:32 src@host krb5kdc[19607]: AS_REQ (7 etypes {23 -133-128 3
1 24 -135}) 192.168.0.100: ISSUE: authtime 1099389812, etypes {rep=3
tkt=1 ses=1}, Username@REALM.COM for kadmin/changepw@REALM.COM
Nov 2 12:03:32 src@host krb5kdc[19607]: AS_REQ (7 etypes {23 -133-128 3
1 24 -135}) 192.168.0.100: ISSUE: authtime 1099389812, etypes {rep=3
tkt=1 ses=1}, Username@REALM.COM for kadmin/changepw@REALM.COM
Nov 2 12:03:32 src@london2 krb5kdc[19607]: DISPATCH: repeated
(retransmitted?) request from 192.168.0.100, resending previous response
Nov 2 12:03:32 src@london2 krb5kdc[19607]: DISPATCH: repeated
(retransmitted?) request from 192.168.0.100, resending previous response
*******
Regards,
Sven
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
