Re: kpasswd -c /tmp/krb5cc_1000 alice@EXAMPLE.COM doesn't work?

["Henry B. Hotz" <hotz@jpl.nasa.gov>]

On Dec 15, 2007, at 2:35 PM, Love Hörnquist Åstrand wrote:

>>>
>
> Hello,
>
>
>> Ultimately I just needed to pass 'kadmin/changepw' to
>> krb5_get_init_creds_password. The resulting ccache can then be used
>> with krb5_set_password_using_ccache.
>
> You are correct, initial tickets are needed to change password.
>
> kinit -S kadmin/changepw will work too.
>
> Love

Hmmm.  I thought the service ticket needed the "initial" flag to be  
accepted, which translated to needing the "kinit -S".  Didn't think  
it was allowed to use a tgt intermediary.

Did that change, or did the clients just not support it?  (I'm  
comparing to 0.6-ish.)

------------------------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu