I've long been curious how a machine joined to a KDC/Active Directory changes it's password periodically. Must the machine store it's machine password so it can be used for the equivalent of kpasswd which prompts for the current password? Or is there another method which allows the machine account to change it's password as long as it can establish credentials via it's host keytab? -- _______________________________________________ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue