Creation of principal without password

[Russ Allbery]

Fariba <fariba at usc.edu> writes:

> Could you elaborate on that?

In order to change the key of a principal, you need administrative access
to the KDC database, either through kadmin.local, the kadmin network
protocol, or something like the password change protocol (which is only
semi-standardized).

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>