[24637] in Kerberos
Re: Decrypt integrity check failed while changing password
daemon@ATHENA.MIT.EDU (Ken Hornstein)
Wed Sep 14 13:19:56 2005
Message-Id: <200509141717.j8EHHmaI021712@ginger.cmf.nrl.navy.mil>
To: kerberos@mit.edu
In-Reply-To: <2ddbea3345c73fb5dc4235e5ad27d973@gmu.edu>
Date: Wed, 14 Sep 2005 13:17:48 -0400
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Errors-To: kerberos-bounces@mit.edu
>I had to do a bunch of account cleanups (~35,000 deletions) yesterday.
>Today, I'm getting the message 'change_password: Decrypt integrity
>check failed while changing password for "principal@GMU.EDU"' when
>trying to change a password. If I create a new principal, I am able to
>change it's password. I'm using kadmin.local -- we don't run kadmind.
>
>Anyone have an idea what I deleted that I shouldn't have?
I suspect that since you deleted kadmin/history, you're getting this error
from deep within the kadmin library when it's trying to access the password
history. That's just a guess, though. You're getting this message from
kadmin.local, right?
How you recover from this ... well, I have no idea, actually. Did you
happen to save the old kadmind keytab?
--Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
