[30991] in Kerberos
Re: kpasswd: Authentication error: Failed reading application request
daemon@ATHENA.MIT.EDU (Russ Allbery)
Thu Apr 9 14:11:58 2009
X-Barracuda-Envelope-From: eagle@windlord.stanford.edu
To: "Mendez\, Franklyn" <fmendez@qualitytech.com>
In-Reply-To: <5888FCB767AD5F41A65DC0DCFE91C9210ECE4D1D@EDC-SUW-EXCH.edeltacom.biz>
(Franklyn Mendez's message of "Thu\, 9 Apr 2009 08\:15\:10 -0400")
From: Russ Allbery <rra@stanford.edu>
Date: Thu, 09 Apr 2009 11:11:14 -0700
Message-ID: <87ab6phf3x.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
"Mendez, Franklyn" <fmendez@qualitytech.com> writes:
> Any ideas anyone?
> Password for user@DOMAININT.COM:
> Enter new password:
> Enter it again:
> Authentication error: Failed reading application request
>
> On the Server's side I do see the client trying to change the user's
> password but no more detail:
>
> Apr 07 11:54:17 host02 krb5kdc[13289](info): AS_REQ (5 etypes {16 23 18
> 3 1}) 10.x.x.x: ISSUE: authtime 1239119657, etypes {rep=16 tkt=16
> ses=16}, user@DOMAININT.COM for kadmin/changepw@DOMAININT.COM
> Apr 07 11:54:17 host02 krb5kdc[13289](info): AS_REQ (5 etypes {16 23 18
> 3 1}) 10.x.x.x: ISSUE: authtime 1239119657, etypes {rep=16 tkt=16
> ses=16}, user@DOMAININT.COM for kadmin/changepw@DOMAININT.COM
Kind of an obvious question, but are you running kadmind on the server?
Your logs show the KDC traffic that would happen prior to the the kadmind
connection, but nothing logged from kadmind.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
