On 09/27/2011 03:24 AM, Goff, Raal wrote: > Hi, > > My IPA 2.0 master-slave setup has been working fine up until this week when > users started getting problems updating their password due to expiry. Users > get the following error when using kpasswd to update their passwords: > > kinit: krb5_get_init_creds: Unable to reach any changepw server in realm > EXAMPLE.COM > > The only error I seem to find in the logs is unhelpful: > > Sep 27 15:16:12 ipa1 kpasswd[2689]: Unsupported version > Sep 27 15:16:43 ipa1 kpasswd[2692]: Unsupported version > > Additionally, it seems some users can reset their passwords, but the error > still appears in the logs, and on the client software: > > Sep 27 15:08:52 ipa1 kpasswd[2630]: Unsupported version > Sep 27 15:09:23 ipa1 kpasswd[2633]: Unsupported version > Sep 27 15:09:54 ipa1 kpasswd[2637]: Password change succeeded > > It looks like 'Unsupported version' is a reference to 'krb5_kdb_bad_version: > Unsupported version in database entry' in the kerberos software, but I can't > find any more information regarding it. > > Has anyone come across this before? Is there any way to recover from it? >
Is there anything related to KRB4 around? Can it be that your client is KRB4? > Regards, > > -R > > > ZettaServe Disclaimer: This email and any files transmitted with it are > confidential and intended solely for the use of the individual or entity to > whom they are addressed. If you are not the named addressee you should not > disseminate, distribute or copy this e-mail. Please notify the sender > immediately if you have received this email by mistake and delete this email > from your system. Computer viruses can be transmitted via email. The > recipient should check this email and any attachments for the presence of > viruses. ZettaServe Pty Ltd accepts no liability for any damage caused by any > virus transmitted by this email. > > > _______________________________________________ > Freeipa-users mailing list > [email protected] > https://www.redhat.com/mailman/listinfo/freeipa-users > > -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. ------------------------------- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ _______________________________________________ Freeipa-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/freeipa-users
