On Thu, 2012-03-08 at 07:33 -0700, Ken Dreyer wrote: > On Wed, Mar 7, 2012 at 9:38 PM, Simon Dwyer <[email protected]> wrote: > > Error: krb5_set_password_using_ccache failed (Cannot contact any KDC for > > requested realm) > > Error: set_password failed > > Hi Simon, > > It looks like msktutil was able to successfully create the computer > object in AD. This error message means that your computer could not > contact your domain controller in order to set the computer object's > password after it's created. > > I recommend firing up tcpdump or Wireshark to confirm that the > Kerberos password change is getting through to your DC. Kerberos does > use a different port for password changes (port 464) than normal > traffic (port 88), so it's possible a firewall is involved. You could > also test it out by changing your own AD password on this box using > the kpasswd command. > > - Ken
Thanks for the reply Ken, here is an output of me changing my password. [root@squid-k net]# kpasswd Password for [email protected]: Enter new password: Enter it again: Password changed. so that seems to work well. I will get a wireshark dump this morning and have a look. Simon ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
