Kbrfw: failed to decrypt password
Robert Marcano
robert at marcanoonline.com
Fri Nov 14 11:42:15 EST 2008
On Thu, 2008-11-13 at 19:22 -0500, Ken Raeburn wrote:
> On Nov 13, 2008, at 17:55, Robert Marcano wrote:
> > When a password is expired i have problems to replace it with a new
> > password on Windows clients:
> >
> > With kinit:
> >
> > Password expired. You must change it now.
> > Enter new password:
> > Enter it again:
> > kinit(v5): Password change failed while getting initial credentials
> >
> > With kpasswd and Network Identity Manager: "failed to decrypt
> > password"
> >
> > On a Linux client I am able to update the password without problems
> > using kpasswd or kinit. Those errors only happens on MIT kerberos for
> > Windows, any help is appreciated.
>
> What's the network configuration like? The password changing protocol
> may not work through a NAT box.
>
yes that was the reason, Windows was running on an VM (virtualbox.org)
on my laptop connected to the net using NAT. So this test passed :-),
but I think this will cause me a little trouble on production when a
user is behind of one of those wireless routers that do NAT by default
Thanks...
> Ken
More information about the Kerberos
mailing list