[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: kpasswd -c /tmp/krb5cc_1000 alice@EXAMPLE.COM doesn't work?

On Dec 15, 2007, at 2:35 PM, Love Hörnquist Åstrand wrote:

> Hello,
>> Ultimately I just needed to pass 'kadmin/changepw' to
>> krb5_get_init_creds_password. The resulting ccache can then be used
>> with krb5_set_password_using_ccache.
> You are correct, initial tickets are needed to change password.
> kinit -S kadmin/changepw will work too.
> Love

Hmmm.  I thought the service ticket needed the "initial" flag to be  
accepted, which translated to needing the "kinit -S".  Didn't think  
it was allowed to use a tgt intermediary.

Did that change, or did the clients just not support it?  (I'm  
comparing to 0.6-ish.)

The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu