Kerberos for Mac caches password expiration info?

[Alexandra Ellwood]

On Mar 26, 2004, at 8:36 PM, Matt Crawford wrote:

> A user here got a Kerberos "password will expire in five days" warning  
> from kinit on MacOS X and changed his password.  On his Mac Powerbook,  
> he still gets the warning (with the time counting down).  On Linux he  
> does not.  The KDC shows his password changed and the expiration time  
> far in the future.
>
> Let me know if there's some other information or research needed.  I  
> *think* this user is running Panther.

Is it possible that the user's Macintosh is talking to a slave KDC  
which has not yet updated to reflect the password change?  I tried this  
against a Heimdal 0.6 KDC with the 10.3.3 kpasswd/kinit and was unable  
to reproduce the behavior you describe.


Hope this helps,

--lxs
------------------------------------------------------------------------ 
-----
Alexandra Ellwood                                                
<lxs at mit.edu>
MIT Information Services & Technology                  
http://mit.edu/lxs/www/
------------------------------------------------------------------------ 
-----