Kbrfw: failed to decrypt password

[Ken Raeburn]

On Nov 13, 2008, at 17:55, Robert Marcano wrote:
> When a password is expired i have problems to replace it with a new
> password on Windows clients:
>
> With kinit:
>
> Password expired. You must change it now.
> Enter new password:
> Enter it again:
> kinit(v5): Password change failed while getting initial credentials
>
> With kpasswd and Network Identity Manager: "failed to decrypt  
> password"
>
> On a Linux client I am able to update the password without problems
> using kpasswd or kinit. Those errors only happens on MIT kerberos for
> Windows, any help is appreciated.

What's the network configuration like?  The password changing protocol  
may not work through a NAT box.

Ken