Problem changing expired Windows 2000 passwords

Tim Alsop Tim.Alsop at CyberSafe.Ltd.UK
Tue Aug 17 12:12:03 EDT 2004


The "Windows cache" is the cache which you can view when using
kerbtray.exe. I didn't try, but I guess you would also see this when
using klist.exe or any other tool that looks in LSA cache.

Tim.

-----Original Message-----
From: kerberos-bounces at MIT.EDU [mailto:kerberos-bounces at MIT.EDU] On
Behalf Of Jeffrey Altman
Sent: 17 August 2004 16:46
To: kerberos at MIT.EDU
Subject: Re: Problem changing expired Windows 2000 passwords

What is "Windows cache"?  Do you mean "KLIST"? "KERBTRAY"?

Or do you mean the ClientName and ClientRealm fields of
KERB_TICKET.... structures?



Tim Alsop wrote:

> Hi,
> 
> I am not sure if this is useful or not, but we recently noticed
> something odd when logging in with user at REALM. If you login with an
> account name of this format and the account is set to use DES keys the
> client principal name shown in Windows cache is user at domain@REALM
> instead of user at REALM ...
> 
> Regards, Tim.
________________________________________________
Kerberos mailing list           Kerberos at mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos





More information about the Kerberos mailing list