kpasswd: Authentication error: Failed reading application request

[Mendez, Franklyn]

Any ideas anyone?

Thanks,


Franklyn Mendez 
Sr. UNIX Engineer 
95 Christopher Columbus Drive * 16th Floor * Jersey City, NJ, 07302 
Direct: 212.625.7327 * Fax: 212.625.7246
P THINK GREEN | Don't print this email unless absolutely necessary

-----Original Message-----
From: kerberos-bounces at mit.edu [mailto:kerberos-bounces at mit.edu] On
Behalf Of Mendez, Franklyn
Sent: Tuesday, April 07, 2009 12:09 PM
To: kerberos at mit.edu
Subject: kpasswd: Authentication error: Failed reading application
request 

Need assistance solving this issue.

My Kerberos users can't change their password running kpasswd userid
The client users can successfully login with their accounts. They can
run kinit to acquire a token, but even though they do, they can't change
their password.
The client is configured to use PAM.

Password for user at DOMAININT.COM: 
Enter new password: 
Enter it again: 
Authentication error: Failed reading application request

On the Server's side I do see the client trying to change the user's
password but no more detail:

Apr 07 11:54:17 host02 krb5kdc[13289](info): AS_REQ (5 etypes {16 23 18
3 1}) 10.x.x.x: ISSUE: authtime 1239119657, etypes {rep=16 tkt=16
ses=16}, user at DOMAININT.COM for kadmin/changepw at DOMAININT.COM
Apr 07 11:54:17 host02 krb5kdc[13289](info): AS_REQ (5 etypes {16 23 18
3 1}) 10.x.x.x: ISSUE: authtime 1239119657, etypes {rep=16 tkt=16
ses=16}, user at DOMAININT.COM for kadmin/changepw at DOMAININT.COM

Any ideas?

Thanks all,

QUALITY TECHNOLOGY SERVICES CONFIDENTIALITY NOTICE:  This e-mail message including its attachments is classified COMPANY CONFIDENTIAL.  It is intended for the person or entity to which it is addressed and may contain confidential material.  Quality Technology Services controls the distribution of COMPANY CONFIDENTIAL assets, as such, any unauthorized review, use, disclosure or distribution is prohibited.  If you are not the intended recipient, please contact us at irt at qualitytech.com or 866-239-5000 and destroy all copies of the original message.  Thank you.