"Expiration" vs "Password Expiration"

Matthew J. Smith matt.smith at uconn.edu
Tue Jun 17 08:38:05 EDT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All-
  To nudge my post from last week, I'm wondering if someone can just
confirm what I'm seeing, or correct my understanding here.

  I am using the MIT KDC 1.4.3, as included in Ubuntu LTS.

  I am using the MIT kinit 1.6, as included in Ubuntu 8.0.4, but I also
see the same message from my XP workstation configured to use the KDC.

  I modify the "expiration" and "password expiration" for the principal
"mas02041" as follows:

kadmin: modprinc -expire "7 day" -pwexpire "1 day" mas02041
Principal "mas02041 at UCONN.EDU" modified.

kadmin:  getprinc mas02041
Principal: mas02041 at UCONN.EDU
Expiration date: Tue Jun 24 08:26:59 EDT 2008
...
Password expiration date: Wed Jun 18 08:26:59 EDT 2008
...


~$ kinit mas02041
Password for mas02041 at UCONN.EDU:
Warning: Your password will expire in 6 days.



My expectation was that the password expiration message returned by
kinit would reflect the "Password Expiration", not the "Expiration", as
show in kadmin.

Is this a bug, a feature, an old version issue, or simply my own
misunderstanding or misconfiguration?

Thank you all,
- -Matt

- --
Matthew J. Smith
University of Connecticut ITS
matt.smith at uconn.edu
PGP KeyID: 0xE9C5244E
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIV7AsGP63pOnFJE4RAuPYAKCEbbnsQLPU0VBLTaAv5JE/5/4x0ACgtVzB
CJr7UUCKwAk96kKrS3al01s=
=llW+
-----END PGP SIGNATURE-----



More information about the Kerberos mailing list