Error: krb5_set_password_using_ccache failed (Cannot contact any KDC for requested realm)
Simon Dwyer
mail at simmyd.net
Thu Mar 8 15:00:36 EST 2012
On Thu, 2012-03-08 at 07:33 -0700, Ken Dreyer wrote:
> On Wed, Mar 7, 2012 at 9:38 PM, Simon Dwyer <mail at simmyd.net> wrote:
> > Error: krb5_set_password_using_ccache failed (Cannot contact any KDC for
> > requested realm)
> > Error: set_password failed
>
> Hi Simon,
>
> It looks like msktutil was able to successfully create the computer
> object in AD. This error message means that your computer could not
> contact your domain controller in order to set the computer object's
> password after it's created.
>
> I recommend firing up tcpdump or Wireshark to confirm that the
> Kerberos password change is getting through to your DC. Kerberos does
> use a different port for password changes (port 464) than normal
> traffic (port 88), so it's possible a firewall is involved. You could
> also test it out by changing your own AD password on this box using
> the kpasswd command.
>
> - Ken
Thanks for the reply Ken,
here is an output of me changing my password.
[root at squid-k net]# kpasswd
Password for asdwyer at OURCOMPANY.EXAMPLE:
Enter new password:
Enter it again:
Password changed.
so that seems to work well.
I will get a wireshark dump this morning and have a look.
Simon
More information about the Kerberos
mailing list