Error: krb5_set_password_using_ccache failed (Cannot contact any KDC for requested realm)

[Simon Dwyer]

On Thu, 2012-03-08 at 07:33 -0700, Ken Dreyer wrote:
> On Wed, Mar 7, 2012 at 9:38 PM, Simon Dwyer <mail at simmyd.net> wrote:
> > Error: krb5_set_password_using_ccache failed (Cannot contact any KDC for
> > requested realm)
> > Error: set_password failed
> 
> Hi Simon,
> 
> It looks like msktutil was able to successfully create the computer
> object in AD. This error message means that your computer could not
> contact your domain controller in order to set the computer object's
> password after it's created.
> 
> I recommend firing up tcpdump or Wireshark to confirm that the
> Kerberos password change is getting through to your DC. Kerberos does
> use a different port for password changes (port 464) than normal
> traffic (port 88), so it's possible a firewall is involved. You could
> also test it out by changing your own AD password on this box using
> the kpasswd command.
> 
> - Ken

Thanks for the reply Ken,

here is an output of me changing my password.

[root at squid-k net]# kpasswd 
Password for asdwyer at OURCOMPANY.EXAMPLE: 
Enter new password: 
Enter it again: 
Password changed.

so that seems to work well. 

I will get a wireshark dump this morning and have a look.


Simon