Problems with kadmind, kpasswd and cross-realm authentication

[Anthony Brock]

> -----Original Message-----
> kpasswd doesn't work on the KDC. It only works for the initial realm even
> when the kpasswd command is issued on the KDC. That's why I'm a little
> baffled as to how to proceed. I've read the following in the kadmind man
> page:
>
< ... SNIP ...
>
> An excerpt of these files is listed below, as well as the
> cross-realm krbtgt
> principals I've created. I'm hoping that I have missed something
> obvious in
> the configuration.

Any ideas?

The man page states that kadmind should be able to change passwords for any
realms that have an associated kadmin/changepw@<REALM> and
kadmin/admin@<REALM> principal. Is this still true? Or has support for this
functionality been dropped? If not, what debugging can be performed to
identify the cause of the issue?

Ideas?

Tony