[28801] in Kerberos
kpasswd: Message stream modified changing password
daemon@ATHENA.MIT.EDU (Francois Legrand)
Wed Nov 28 04:53:10 2007
Message-ID: <474D3A0F.8050703@lpnhe.in2p3.fr>
Date: Wed, 28 Nov 2007 10:51:11 +0100
From: Francois Legrand <fleg@lpnhe.in2p3.fr>
MIME-Version: 1.0
To: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============0664930156=="
Errors-To: kerberos-bounces@mit.edu
This is a cryptographically signed message in MIME format.
--===============0664930156==
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature";
micalg=sha1; boundary="------------ms000309010306030700040709"
This is a cryptographically signed message in MIME format.
--------------ms000309010306030700040709
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
I have a "problem" with kerberos and I can't figure out what's going on.
It's related to the command kpasswd.
I run a MIT kerberos (Version: 1.4.4-5ubuntu3.3) on a ubuntu 7.04 server.
The kdc and replica works well, but I have problems changing passwords.
Here is what I do and the result is the same whatever the computer I
work on (client or kdc server):
*> kinit toto*
Password for toto@MYREALM:
*> klist*
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: toto@MYREALM
Valid starting Expires Service principal
11/28/07 09:44:48 11/28/07 19:44:48 krbtgt/MYREALM@MYREALM
renew until 11/29/07 09:44:46
Kerberos 4 ticket cache: /tmp/tkt1000
klist: You have no tickets cached
*>kpasswd *
Password for toto@MYREALM:
Enter new password:
Enter it again:
kpasswd: Message stream modified changing password
And the password is not modified.
The point is that I can't find anything in the logs. Basicaly, I can see
the exchanges at the begining of kpasswd, when it asks
for the current password
This line before asking
Nov 28 09:48:43 lpnauth1 krb5kdc[5578](info): AS_REQ (7 etypes {18 17 16
23 1 3 2}) 134.158.152.86: NEEDED_PREAUTH: toto@MYREALM for
kadmin/changepw@MYREALM, Additional pre-authentication required
and this one after I type the password
Nov 28 09:48:46 lpnauth1 krb5kdc[5578](info): AS_REQ (7 etypes {18 17 16
23 1 3 2}) 134.158.152.86: ISSUE: authtime 1196239726, etypes {rep=16
tkt=16 ses=16}, toto@MYREALM for kadmin/changepw@MYREALM
and then nothing more... I type the new password but there is no more
communication between the client on which I run kpasswd and the kdc (I
even tryed to shutdown the kdc machine before validating the new passwd
and I still get the same error message).
I googlelized the error message and find nothing very helpful.
Any idea ?
Thanks.
Francois
--------------ms000309010306030700040709
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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--------------ms000309010306030700040709--
--===============0664930156==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============0664930156==--
