I have a "problem" with kerberos and I can't figure out what's going on.
It's related to the command kpasswd.

I run a MIT kerberos (Version: 1.4.4-5ubuntu3.3) on a ubuntu 7.04 server.
The kdc and replica works well, but I have problems changing passwords.

Here is what I do and the result is the same whatever the computer I work on (client or kdc server):

*> kinit toto*
Password for [EMAIL PROTECTED]:

*>  klist*
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: [EMAIL PROTECTED]

Valid starting     Expires            Service principal
11/28/07 09:44:48  11/28/07 19:44:48  krbtgt/[EMAIL PROTECTED]
       renew until 11/29/07 09:44:46


Kerberos 4 ticket cache: /tmp/tkt1000
klist: You have no tickets cached

*>kpasswd *
Password for [EMAIL PROTECTED]:
Enter new password:
Enter it again:
kpasswd: Message stream modified changing password

And the password is not modified.

The point is that I can't find anything in the logs. Basicaly, I can see the exchanges at the begining of kpasswd, when it asks
for the current password
This line before asking
Nov 28 09:48:43 lpnauth1 krb5kdc[5578](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 134.158.152.86: NEEDED_PREAUTH: [EMAIL PROTECTED] for kadmin/[EMAIL PROTECTED], Additional pre-authentication required

and this one after I type the password
Nov 28 09:48:46 lpnauth1 krb5kdc[5578](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 134.158.152.86: ISSUE: authtime 1196239726, etypes {rep=16 tkt=16 ses=16}, [EMAIL PROTECTED] for kadmin/[EMAIL PROTECTED]

and then nothing more... I type the new password but there is no more communication between the client on which I run kpasswd and the kdc (I even tryed to shutdown the kdc machine before validating the new passwd and I still get the same error message).

I googlelized the error message and find nothing very helpful.

Any idea ?
Thanks.

Francois

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to