[7950] in Kerberos
Re: kpasswd problem
daemon@ATHENA.MIT.EDU (Robert Von Borstel)
Fri Sep 13 17:41:57 1996
To: kerberos@MIT.EDU
Date: 13 Sep 1996 16:11:54 -0500
From: vonb@charlie.cns.iit.edu (Robert Von Borstel)
In article <51c1n3$bp3@mark.ucdavis.edu>,
Jason Gabler <ccjason@quadrophenia.ucdavis.edu> wrote:
>Robert Von Borstel (vonb@charlie.cns.iit.edu) wrote:
>
>: 'kpasswd' command, the following error returns:
>
>: % kpasswd
>: Enter old password:
>: Enter new password:
>: Re-enter new password:
>: kpasswd: server error (Old password incorrect) during change password request.
>: kpasswd - server: Password incorrect.
>
>: The password the users enters is correct, otherwise kpasswd would fail
>: after the 'old passwd' prompt.
>: Is there some type of 'chpasswd' instance in the kdb that's needed?
>
>Yes:
>
>changepw/REALM@REALM
>
>But this "solution" doesn't seem to match the complaint by kpasswd
>that you are reporting. I believe the complaint for this solution
>would be something like "unknown service" (I know it would say
>"unknow" I am not sure about the "service" part).
>
>The only other thing I can think of is, is thre a problem with your
>v5srvtab? Do other services work when passwords are correct?
>
>How are you adding these principals? (Kadmin or kdb5_edit?)
>--
>Lehitra'ot!
> jason
The problem definitely seems to be with the afs subkey. When I delete
'des:afs3' from the supported_enctypes in the kdc.conf file, kpasswd
works fine.
--
Robert Von Borstel . email:vonb@iit.edu
Illinois Institute of Technology .
Computing & Network Services (312) 567 5809 (fax) x5968
10 West 31st Street Chicago, Ill 60616
