Account unlocking and kadmin

[John Devitofranceschi]

Might it be the case that administrative account unlocking using kadmin (modprinc -unlock princname) will fail in some cases if the version of kadmin is not sufficiently modern?

For example, kadmin from 1.8.2 can be used to a unlock a principal on a 1.13.2 master, but not when the principal is locked on one of the slaves (when propagating from the master).

When a 1.13.2 kadmin is used, "modprinc -unlock” works for the master and the slaves.


jd