[Bug 715765] [NEW] Can't change kerberos password

[Thomas Schweikle]

Public bug reported:

$ kpasswd
Password for user at EXAMPLE.COM: 
Enter new password: 
Enter it again: 
Server error: Failed decrypting request

Trying with passwd:
$ passwd
Ändern des Passworts für user.
(aktuelles) UNIX-Passwort: 
passwd: Fehler beim Ändern des Authentifizierungstoken
passwd: password unchanged

It is impossible to change the password. /etc/krb5.conf:
[libdefaults]
        default_realm = EXAMPLE.COM
        dns_lookup_kdc = false
        dns_lookup_realm = false
        kdc_timesync = 1
        ccache_type = 4
        no-addresses = true
        forwardable = true
        proxiable = true

[realms]
        EXAMPLE.COM = {
                kdc = 192.168.1.4
                admin_server = 192.168.1.4
                default_domain = example.com
        }

[domain_realm]
        .example.com = EXAMPLE.COM
        example.com = EXAMPLE.COM

[login]
        krb4_convert = true
        krb4_get_tickets = false

[logging]
        default = FILE:/var/log/kerberos/krb5lib.log


I'll handed a tgt login in:
$ klist -f5
Ticket cache: FILE:/tmp/krb5cc_2023
Default principal: user at EXAMPLE.COM

Valid starting     Expires            Service principal
02/07/11 14:49:30  02/08/11 00:49:30  krbtgt/EXAMPLE.COM at EXAMPLE.COM
        renew until 02/08/11 14:49:31, Flags: FPRIA
02/07/11 18:28:29  02/08/11 00:49:30  host/srv.example.com at EXAMPLE.COM
        renew until 02/08/11 14:49:31, Flags: FPRAT
$

I can call kadmin:
$ kadmin
Authenticating as principal user/admin at EXAMPLE.COM with password.
Password for user/admin at EXAMPLE.COM: 
kadmin:  

It is no problem to change the password then.
None of the hosts has IPv6-Addresses. There all at IPv4.

ProblemType: Bug
DistroRelease: Ubuntu 10.10
Package: krb5-user 1.8.1+dfsg-5ubuntu0.2
Uname: Linux 2.6.36.3 x86_64
Architecture: amd64
Date: Wed Feb  9 14:24:46 2011
ProcEnviron:
 PATH=(custom, user)
 LANG=de_DE.utf8
 SHELL=/bin/bash
SourcePackage: krb5

** Affects: krb5 (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug maverick

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to krb5 in ubuntu.
https://bugs.launchpad.net/bugs/715765

Title:
  Can't change kerberos password