Query on kpasswd and kadmin ?

[Vipin Rathor]

Hi Folks,

I had a query on kerberos change password mechanism. One can change kerberos
password using two ways:

1. using 'kpasswd'

2. using 'kadmin'

I know that 'kadmin' is not based on any standard or RFC and hence we
sometimes have inter-op issues. But kpasswd seem to work well with most of
the kerberos implementation. Digging kpasswd code, it surprisingly does NOT
make use of kadm5_xxx() APIs but makes use of krb5_change_password() , a
krb5 API.

So my query is ,

" Is 'kpasswd' based on a standard/ Kerberos RFC" unlike the kadmin which is
not based on any RFC/standard ?

Looking forward for some guidance,

Thanks in advance,
-Rathor