[
https://issues.apache.org/jira/browse/DIRSERVER-2069?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15083038#comment-15083038
]
Teun Hoogendoorn edited comment on DIRSERVER-2069 at 1/5/16 1:21 PM:
---------------------------------------------------------------------
Ran into this exact issue.
The patch from Alexander works.
was (Author: th76):
Ran into this exact issue.
The patch from Axlendar works.
> Failed to change password if realm is not EXAMPLE.COM
> -----------------------------------------------------
>
> Key: DIRSERVER-2069
> URL: https://issues.apache.org/jira/browse/DIRSERVER-2069
> Project: Directory ApacheDS
> Issue Type: Bug
> Reporter: Alexander Bersenev
> Attachments: realm.patch
>
>
> From
> verifyServiceTicket(protocol-kerberos/src/main/java/org/apache/directory/server/kerberos/changepwd/service/ChangePasswordService.java):
> ChangePasswordConfig config = changepwContext.getConfig();
> ...
> String primaryRealm = config.getPrimaryRealm();
> ...
> if ( !ticket.getRealm().equals( primaryRealm ) ||
> !serverPrincipal.getName().equals( changepwPrincipal.getName() ) )
> {
> throw new KerberosException(
> org.apache.directory.shared.kerberos.exceptions.ErrorType.KRB_AP_ERR_NOT_US );
> }
> The primary realm is always EXAMPLE.COM because an initialization of
> primaryRealm in ChangePasswordConfig was forgot.
> Attached one-string patch fixes it.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
