Kbrfw: failed to decrypt password

Robert Marcano robert at marcanoonline.com
Fri Nov 14 11:42:15 EST 2008


On Thu, 2008-11-13 at 19:22 -0500, Ken Raeburn wrote:
> On Nov 13, 2008, at 17:55, Robert Marcano wrote:
> > When a password is expired i have problems to replace it with a new
> > password on Windows clients:
> >
> > With kinit:
> >
> > Password expired. You must change it now.
> > Enter new password:
> > Enter it again:
> > kinit(v5): Password change failed while getting initial credentials
> >
> > With kpasswd and Network Identity Manager: "failed to decrypt  
> > password"
> >
> > On a Linux client I am able to update the password without problems
> > using kpasswd or kinit. Those errors only happens on MIT kerberos for
> > Windows, any help is appreciated.
> 
> What's the network configuration like?  The password changing protocol  
> may not work through a NAT box.
> 

yes that was the reason, Windows was running on an VM (virtualbox.org)
on my laptop connected to the net using NAT. So this test passed :-),
but I think this will cause me a little trouble on production when a
user is behind of one of those wireless routers that do NAT by default

Thanks...

> Ken




More information about the Kerberos mailing list