[24493] in Kerberos
Password Changing failing from Windows to MIT KDC
daemon@ATHENA.MIT.EDU (Mike Friedman)
Mon Aug 22 19:23:23 2005
Date: Mon, 22 Aug 2005 16:22:25 -0700 (PDT)
From: Mike Friedman <mikef@ack.berkeley.edu>
To: kerberos@mit.edu
Message-ID: <20050822161705.T3944@malcolm.berkeley.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Errors-To: kerberos-bounces@mit.edu
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I posted on this a few days ago but haven't received any replies, so I
figure it may have fallen through the cracks.
It seems that with the current release of KfW, password changing fails to
either a 1.3.4 or 1.4.2 KDC. Yet, earlier versions of KfW don't have this
problem. Similarly with Windows native Kerberos password changing. I
haven't done testing of the latter myself, but a colleague who works on
Windows has.
The message he receives is this:
Server error: Failed decrypting request
The KDC logs show a successful issuing of the kadmin/changepw service
credential, but no further action indicating a change password
transaction.
I suspected a client host firewall problem (re: UDP 464), but the problem
continues even with no firewall rules in place.
Has something changed with the new versions of KfW?
Thanks.
Mike
_____________________________________________________________________
Mike Friedman System and Network Security
mikef@ack.Berkeley.EDU 2484 Shattuck Avenue
1-510-642-1410 University of California at Berkeley
http://ack.Berkeley.EDU/~mikef http://security.berkeley.edu
_____________________________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
iQA/AwUBQwpeNa0bf1iNr4mCEQJMfACguSLN/kmNmUtxMo5ycWBKe6kUtCoAn3ns
ExreoCkJTbrHJ/AYjkQSQ18u
=9jE3
-----END PGP SIGNATURE-----
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
