[27071] in Kerberos
kinit always warning about passw expiration
daemon@ATHENA.MIT.EDU (Andreas Hasenack)
Mon Nov 27 12:27:12 2006
Date: Mon, 27 Nov 2006 15:26:25 -0200
From: Andreas Hasenack <ahasenack@terra.com.br>
To: kerberos@mit.edu
Message-ID: <20061127172625.GF4232@mandriva.com>
Mime-Version: 1.0
Content-Disposition: inline
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
When I run MIT's kinit (version 1.4.3 + sec.patch) against a heimdal KDC
(0.7, backend in ldap, no samba attributes), I always get the password
expiration warning:
$ kinit
Password for mary@EXAMPLE.COM:
Warning: Your password will expire in 364 days on Tue Nov 27 15:17:52 2007
$
The KDC has this attribute in this user's entry:
krb5PasswordEnd: 20071127171752Z
If I do the same from heimdal's kinit, I only get the warning if the
expiration time is in 7 days or less, which is my intention.
I suppose there is some incompatibility in the network protocol
between the two implementations?
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
