password change protocol implementation

[Ken Hornstein]

>After all, kadmin uses the GSS-API, so precedent for the use of the
>GSS-API instead of raw Kerberos V for KDC-related services exists.

You mean that wacky, non-standardized, completely non-interoperable-between-
Kerberos-implementations protocol? :-)

Actually, I don't necessarily disagree ... but sadly, we're stuck with the
existing protocol in the short term, and I need to make the damn thing
work.

--Ken