[28387] in Kerberos
RE: Problems with kadmind, kpasswd and cross-realm authentication
daemon@ATHENA.MIT.EDU (Anthony Brock)
Sat Sep 8 02:58:10 2007
From: "Anthony Brock" <brocka@sterlingcgi.com>
To: "Christopher D. Clausen" <cclausen@acm.org>, <kerberos@mit.edu>
Date: Fri, 7 Sep 2007 23:57:03 -0700
Message-ID: <LEEIJGBJEEABAGOFFGAHCELIDPAA.brocka@sterlingcgi.com>
MIME-Version: 1.0
In-Reply-To: <LEEIJGBJEEABAGOFFGAHKEKMDPAA.brocka@sterlingcgi.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
> -----Original Message-----
> kpasswd doesn't work on the KDC. It only works for the initial realm even
> when the kpasswd command is issued on the KDC. That's why I'm a little
> baffled as to how to proceed. I've read the following in the kadmind man
> page:
>
< ... SNIP ...
>
> An excerpt of these files is listed below, as well as the
> cross-realm krbtgt
> principals I've created. I'm hoping that I have missed something
> obvious in
> the configuration.
Any ideas?
The man page states that kadmind should be able to change passwords for any
realms that have an associated kadmin/changepw@<REALM> and
kadmin/admin@<REALM> principal. Is this still true? Or has support for this
functionality been dropped? If not, what debugging can be performed to
identify the cause of the issue?
Ideas?
Tony
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
