Error: krb5_set_password_using_ccache failed (Cannot contact any KDC for requested realm)

Ken Dreyer ktdreyer at ktdreyer.com
Thu Mar 8 09:33:11 EST 2012


On Wed, Mar 7, 2012 at 9:38 PM, Simon Dwyer <mail at simmyd.net> wrote:
> Error: krb5_set_password_using_ccache failed (Cannot contact any KDC for
> requested realm)
> Error: set_password failed

Hi Simon,

It looks like msktutil was able to successfully create the computer
object in AD. This error message means that your computer could not
contact your domain controller in order to set the computer object's
password after it's created.

I recommend firing up tcpdump or Wireshark to confirm that the
Kerberos password change is getting through to your DC. Kerberos does
use a different port for password changes (port 464) than normal
traffic (port 88), so it's possible a firewall is involved. You could
also test it out by changing your own AD password on this box using
the kpasswd command.

- Ken


More information about the Kerberos mailing list