Ok, so in Active Directory, I have disabled "Require Preauthentication" which has eliminated the KRB5KDC_ERR_PREAUTH_REQUIRED message
I'm still seeing the KRB5KDC_ERR_KEY_EXP I can see the machine send the Kerberos AS-REQ and immediately get a KRB Error: KRB5KDC_ERR_KEY_EXP_KEY It doesn't even appear to acknowledge that a password change is required -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/915386 Title: SSSD/AD 2008 and Password Change To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/915386/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
