Re: [Freeipa-users] Strange issue regarding password change

2012-09-28 Thread Eivind Olsen
Sumit Bose wrote: > hmm, any chance there is a firewall doing NAT between the client and the > KDC? Kerberos password changes do not work reliable over NAT. Afaik > there is some work in progress to make it possible but for the time > being it will not work. Hm, yes. There seems to be NAT between

Re: [Freeipa-users] Strange issue regarding password change

2012-09-28 Thread Sumit Bose
On Fri, Sep 28, 2012 at 03:59:59PM +0200, Eivind Olsen wrote: > > I wrote: > ... > > In the /var/log/messages on the server "libresse", I see: > > > > Sep 28 10:39:15 libresse [sssd[krb5_child[14820]]]: Password has expired > > Sep 28 10:39:15 libresse [sssd[krb5_child[14820]]]: Password has expir

Re: [Freeipa-users] Strange issue regarding password change

2012-09-28 Thread Eivind Olsen
I wrote: ... > In the /var/log/messages on the server "libresse", I see: > > Sep 28 10:39:15 libresse [sssd[krb5_child[14820]]]: Password has expired > Sep 28 10:39:15 libresse [sssd[krb5_child[14820]]]: Password has expired > Sep 28 10:39:48 libresse [sssd[krb5_child[14830]]]: Password has expire