[24472] in Kerberos
Password-changing from Windows
daemon@ATHENA.MIT.EDU (Mike Friedman)
Thu Aug 18 12:34:34 2005
Date: Thu, 18 Aug 2005 09:33:27 -0700 (PDT)
From: Mike Friedman <mikef@ack.berkeley.edu>
To: kerberos@mit.edu
Message-ID: <20050818092627.V99057@malcolm.berkeley.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Errors-To: kerberos-bounces@mit.edu
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Is there a known problem with the password-changing interface from Windows
to an MIT KDC, either 1.3.4 or 1.4.2? Based on testing by one of my
colleagues who works in the Windows environment, it seems that
password-changing, either using the native Windows Kerberos
password-change facilities or even the MIT-supplied KfW (2.6.5) kpasswd
command and the Leash GUI, the following message is received on the
Windows side:
Server error: Failed decrypting request
The KDC logs show a successful issuing of the kadmin/changepw service
credential, but no further action indicating a change password
transaction.
I believe we've never been able to get native Windows password-changing to
work against our MIT KDCs.
I wonder if this is just a configuration issue on our KDC.
Any suggestions?
Thanks.
Mike
_____________________________________________________________________
Mike Friedman System and Network Security
mikef@ack.Berkeley.EDU 2484 Shattuck Avenue
1-510-642-1410 University of California at Berkeley
http://ack.Berkeley.EDU/~mikef http://security.berkeley.edu
_____________________________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
iQA/AwUBQwS4W60bf1iNr4mCEQJNjgCeP4Itn3W/YeOo8p+ZCv+3EAuG/vAAn1UF
L1xaU6PuQyBel/qMFfkJ/2iv
=TCo3
-----END PGP SIGNATURE-----
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
