On 09/27/2011 03:24 AM, Goff, Raal wrote:
> Hi,
>
> My IPA 2.0 master-slave setup has been working fine up until this week when 
> users started getting problems updating their password due to expiry. Users 
> get the following error when using kpasswd to update their passwords:
>
> kinit: krb5_get_init_creds: Unable to reach any changepw server  in realm 
> EXAMPLE.COM
>
> The only error I seem to find in the logs is unhelpful:
>
> Sep 27 15:16:12 ipa1 kpasswd[2689]: Unsupported version
> Sep 27 15:16:43 ipa1 kpasswd[2692]: Unsupported version
>
> Additionally, it seems some users can reset their passwords, but the error 
> still appears in the logs, and on the client software:
>
> Sep 27 15:08:52 ipa1 kpasswd[2630]: Unsupported version
> Sep 27 15:09:23 ipa1 kpasswd[2633]: Unsupported version
> Sep 27 15:09:54 ipa1 kpasswd[2637]: Password change succeeded
>
> It looks like 'Unsupported version' is a reference to 'krb5_kdb_bad_version: 
> Unsupported version in database entry' in the kerberos software, but I can't 
> find any more information regarding it.
>
> Has anyone come across this before? Is there any way to recover from it?
>

Is there anything related to KRB4 around? Can it be that your client is
KRB4?

> Regards,
>
> -R
>
>
> ZettaServe Disclaimer: This email and any files transmitted with it are 
> confidential and intended solely for the use of the individual or entity to 
> whom they are addressed. If you are not the named addressee you should not 
> disseminate, distribute or copy this e-mail. Please notify the sender 
> immediately if you have received this email by mistake and delete this email 
> from your system. Computer viruses can be transmitted via email. The 
> recipient should check this email and any attachments for the presence of 
> viruses. ZettaServe Pty Ltd accepts no liability for any damage caused by any 
> virus transmitted by this email.
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users@redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
>
>


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to