kpasswd: Message stream modified changing password

Francois Legrand fleg at lpnhe.in2p3.fr
Wed Nov 28 04:51:11 EST 2007


I have a "problem" with kerberos and I can't figure out what's going on.
It's related to the command kpasswd.

I run a MIT kerberos (Version: 1.4.4-5ubuntu3.3) on a ubuntu 7.04 server.
The kdc and replica works well, but I have problems changing passwords.

Here is what I do and the result is the same whatever the computer I 
work on (client or kdc server):

*> kinit toto*
Password for toto at MYREALM:

*>  klist*
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: toto at MYREALM

Valid starting     Expires            Service principal
11/28/07 09:44:48  11/28/07 19:44:48  krbtgt/MYREALM at MYREALM
        renew until 11/29/07 09:44:46


Kerberos 4 ticket cache: /tmp/tkt1000
klist: You have no tickets cached

*>kpasswd *
Password for toto at MYREALM:
Enter new password:
Enter it again:
kpasswd: Message stream modified changing password

And the password is not modified.

The point is that I can't find anything in the logs. Basicaly, I can see 
the exchanges at the begining of kpasswd, when it asks
for the current password
This line before asking
Nov 28 09:48:43 lpnauth1 krb5kdc[5578](info): AS_REQ (7 etypes {18 17 16 
23 1 3 2}) 134.158.152.86: NEEDED_PREAUTH: toto at MYREALM for 
kadmin/changepw at MYREALM, Additional pre-authentication required

and this one after I type the password
Nov 28 09:48:46 lpnauth1 krb5kdc[5578](info): AS_REQ (7 etypes {18 17 16 
23 1 3 2}) 134.158.152.86: ISSUE: authtime 1196239726, etypes {rep=16 
tkt=16 ses=16}, toto at MYREALM for kadmin/changepw at MYREALM

and then nothing more... I type the new password but there is no more 
communication between the client on which I run kpasswd and the kdc (I 
even tryed to shutdown the kdc machine before validating the new passwd 
and I still get the same error message).

I googlelized the error message and find nothing very helpful.

Any idea ?
Thanks.

Francois
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4073 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20071128/66be40fe/attachment.bin


More information about the Kerberos mailing list