W2K Pro and Kerberos

[wichmann_1]

Hallo

I have a Windows 2000 Professional SP4 configured to authenticate
with kerberos heimdal  0.6.1rc3 (SuSE 9.1). It works fine.

But when I want to change the password with
STRG-ALT-ENT , it doesn't work.

The error Message is "Ticket may not be forwardable -- joe at xxxx"


2004-05-16T16:27:57 AS-REQ joe at xxxx from IPv4:192.168.1.50 for 
kadmin/changepw at xxxx
2004-05-16T16:27:57 No PA-ENC-TIMESTAMP -- joe at xxxx
2004-05-16T16:27:57 sending 226 bytes to IPv4:192.168.1.50
2004-05-16T16:27:57 AS-REQ joe at xxxx from IPv4:192.168.1.50 for 
kadmin/changepw at xxxx
2004-05-16T16:27:57 Looking for pa-data -- joe at xxxx
2004-05-16T16:27:57 Pre-authentication succeded -- joe at xxxx
2004-05-16T16:27:57 Using des-cbc-md5/des-cbc-md5
2004-05-16T16:27:57 Requested flags: renewable_ok, renewable, forwardable

2004-05-16T16:27:57 Ticket may not be forwardable -- joe at xxxx

2004-05-16T16:27:57 sending 136 bytes to IPv4:192.168.1.50


Is the Problem in the configuration of kerberos or is this a problem 
from Windows 2000 ?

Karl Heinz Wichmann