[23445] in Kerberos

home help back first fref pref prev next nref lref last post

Unable to change expired Kerberos passwords on Windows XP

daemon@ATHENA.MIT.EDU (Priit Randla)
Fri Feb 25 08:41:55 2005

Message-ID: <421F2A59.50203@eyp.ee>
Date: Fri, 25 Feb 2005 15:38:33 +0200
From: Priit Randla <priit.randla@eyp.ee>
MIME-Version: 1.0
To: heimdal-discuss@sics.se, kerberos@mit.edu
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu


    Hello,

    I'm (actually, users are ;-)) having difficulties with Kerberos 
password expiery.
If the user's password expires, XP correctly sends them to the password 
change screen.
User then has to change his/her username to username@REALM (otherwise 
Windows
seems unable to contact KDC) and fill in old/new password fields.
Now the interesting part begins - if users username is all _lowercase_, 
password change
succeeds, login fails, next login succeeds.
If username contains any _uppercase_ letters, password change fails with 
error
'1326: Logon failure : unknown user name or bad password'
Password change with MIT or Heimdal clients works.
KDC log doesn't show anything bad, error is the same for both MIT and 
Heimdal KDC's.
Password change for those users works also on Windows, if the password 
isn't expired.

Regards,
Priit

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post