[Freeipa-users] resetting an admin account.

[Steven Jones]

I have tried to reset my admin password (admjonesst1) using the admin account toa temp password,

So I run a kinit admjonesst1 to reset it to a perm one and I get,

========
[jonesst1 at 8kxl72s ~]$ kinit admjonesst1
Password for admjonesst1 at ODS.VUW.AC.NZ: 
Password expired.  You must change it now.
Enter new password: 
Enter it again: 
kinit: Cannot contact any KDC for requested realm while getting initial credentials
[jonesst1 at 8kxl72s ~]$ kinit admjonesst1
Password for admjonesst1 at ODS.VUW.AC.NZ: 
Password expired.  You must change it now.
Enter new password: 
Enter it again: 
kinit: Cannot contact any KDC for requested realm while getting initial credentials
[jonesst1 at 8kxl72s ~]$ 
========

The krb log says,
=======
Jul 27 10:44:03 vuwunicoipam002.ods.vuw.ac.nz krb5kdc[4102](info): AS_REQ (4 etypes {18 17 16 23}) 130.195.245.249: CLIENT KEY EXPIRED: admjonesst1 at ODS.VUW.AC.NZ for krbtgt/ODS.VUW.AC.NZ at ODS.VUW.AC.NZ, Password has expired
Jul 27 10:44:03 vuwunicoipam002.ods.vuw.ac.nz krb5kdc[4102](info): AS_REQ (4 etypes {18 17 16 23}) 130.195.245.249: NEEDED_PREAUTH: admjonesst1 at ODS.VUW.AC.NZ for kadmin/changepw at ODS.VUW.AC.NZ, Additional pre-authentication required
Jul 27 10:44:11 vuwunicoipam002.ods.vuw.ac.nz krb5kdc[4102](info): AS_REQ (4 etypes {18 17 16 23}) 130.195.245.249: ISSUE: authtime 1343342651, etypes {rep=18 tkt=18 ses=18}, admjonesst1 at ODS.VUW.AC.NZ for kadmin/changepw at ODS.VUW.AC.NZ
Jul 27 10:44:41 vuwunicoipam002.ods.vuw.ac.nz krb5kdc[4102](info): AS_REQ (4 etypes {18 17 16 23}) 130.195.245.249: CLIENT KEY EXPIRED: admjonesst1 at ODS.VUW.AC.NZ for krbtgt/ODS.VUW.AC.NZ at ODS.VUW.AC.NZ, Password has expired
Jul 27 10:44:41 vuwunicoipam002.ods.vuw.ac.nz krb5kdc[4102](info): AS_REQ (4 etypes {18 17 16 23}) 130.195.245.249: NEEDED_PREAUTH: admjonesst1 at ODS.VUW.AC.NZ for kadmin/changepw at ODS.VUW.AC.NZ, Additional pre-authentication required
Jul 27 10:44:46 vuwunicoipam002.ods.vuw.ac.nz krb5kdc[4102](info): AS_REQ (4 etypes {18 17 16 23}) 130.195.245.249: ISSUE: authtime 1343342686, etypes {rep=18 tkt=18 ses=18}, admjonesst1 at ODS.VUW.AC.NZ for kadmin/changepw at ODS.VUW.AC.NZ
=======

Any idea what's going on here pls?



regards

Steven Jones

Technical Specialist - Linux RHCE

Victoria University, Wellington, NZ

0064 4 463 6272