kpasswd fails on remote, succeeds on local

[Ken Raeburn]

On Jun 26, 2006, at 00:24, bogus wrote:
> KDC = kdc.bogus.com
>   kadmind listening on udp port 464


>         kpasswd_server = kdc.bogus.com:749

And you say this worked from one of the machines?  That surprises me  
a bit.

Assuming this is just a typo in the email and you really specified  
464...

> kpasswd: Connection timed out changing password
>
> The KDC is issuing a changepw ticket, as seen by the logs on
> 'kdc', but the transaction is never completed. I get the same
> failure whether I attempt the password change as <user> or
> <root/admin>. Firewalls are not the issue, and I get the same
> results from all remote hosts.  The logs on 'kdc' show no
> reason for the failure.

What does tcpdump show at the time?

Does the KDC have multiple addresses?  I don't think the kadmind code  
has been updated to deal well with that.

Ken