f



kpasswd problem on 1.4.1/1.4.2

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I just noticed that with 1.4.1 and 1.4.2, when I try to change my password 
with kpasswd, I get the following message after entering the new password 
twice:

    kpasswd: Permission denied changing password

This occurs whether the KDC is at 1.3.4 or at 1.4.2.

I don't have the problem using a 1.3.4 kpasswd.

Has something changed in 1.4.x with respect to password changing?

Mike

_____________________________________________________________________
Mike Friedman                   System and Network Security
mikef@ack.Berkeley.EDU          2484 Shattuck Avenue
1-510-642-1410                  University of California at Berkeley
http://ack.Berkeley.EDU/~mikef  http://security.berkeley.edu
_____________________________________________________________________

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQA/AwUBQvuPh60bf1iNr4mCEQKwcACcCPFVvKos0E1vgR/52PQ+0nD/0EMAnjmd
l20HKpKo3c8yXC/BnYU0ocMV
=NeZX
-----END PGP SIGNATURE-----
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

0
mikef (51)
8/11/2005 5:48:52 PM
comp.protocols.kerberos 5541 articles. 1 followers. jwinius (31) is leader. Post Follow

0 Replies
960 Views

Similar Articles

[PageSpeed] 15

Reply:

Similar Artilces:

kpasswd problem on 1.4.1/1.4.2 (NOT!)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Earlier, I posted this: > I just noticed that with 1.4.1 and 1.4.2, when I try to change my > password with kpasswd, I get the following message after entering the > new password twice: > > kpasswd: Permission denied changing password > > This occurs whether the KDC is at 1.3.4 or at 1.4.2. > > I don't have the problem using a 1.3.4 kpasswd. > > Has something changed in 1.4.x with respect to password changing? I now realize what the answer is: my firewall. I needed to open up UDP 464 to allow password-changing. This hasn't been an issue for me in the past because, until very recently, I haven't been running a host-based firewall on my own workstation. If I had been, then I'm sure my 1.3.4 kpasswd would have had the same problem. My test earlier today with a 1.3.4 kpasswd was from a different machine (still running 1.3.4) that doesn't have such a firewall. I realized all this when I discovered that 1.4.2 kpasswd worked fine from my 1.4.2 KDC itself. I then ran a trace of kpasswd on my workstation and saw that the 'permission denied' problem was coming when trying to write to a socket for the actual password change. Sorry for the false alarm! Mike _____________________________________________________________________ Mike Friedman System and Network Security mikef@ack.Berkeley.EDU 2484 Shattuck Avenue 1-510-642-1410 ...

ACE 5.4.2 + TAO 1.4.2 client, ORBacus 4.1.2 NameService, and JACOrb 1.4.1 servants
Hi everyone, Background: ----------- I'm very new to CORBA, ACE & TAO. I'm trying to integrate with a 3rd party system which exposes a CORBA object model to clients. This system is composed of JACOrb 1.4.1 servers registering with an ORBacus 4.1.2 NameService. We've got existing software that uses ACE 5.4.2, and the 3rd party documentation mentions that people have used TAO (no version specified) previously to integrate with their system, so I'm trying out TAO 1.4.2 as a natural solution to the problem. Environment Specifics: ---------------------- - ACE 5.4.2 + TAO 1.4.2 clients - running on a variant of RedHat Enterprise Linux 4.x (x86 platform) - compiled with gcc-c++-3.4.3-22.1 - ORBacus 4.1.2 NameService, and JACorb 1.4.1 servants (the 3rd Party stuff) - running on SunOS 5.9 What I'm trying to do: ---------------------- To get started, I'm trying to create a simple "hi3rdParty" app which acquires a reference to the remote ORBacus NameService so that I can then get at the other services. Here's the code I'm using: try { // ------ begin common CORBA init -------- // First initialize the ORB - that will remove some arguments... // NOTE: we're gonna try and use "-ORBInitRef NameService=corbaloc:iiop:theServer:5000/NameService" // to find the naming service. CORBA::ORB_var orb = CORBA::ORB_init(argc, argv, "&quo...

Problems after Update XFree 4.1.x to 4.2.1.1
Hallo, since i set my debian release from stable to testing, i had some problems with XFree4.2.1.1 that i can't get solved. After installation XFree4.2.1.1 didn't start, because the GLX module couldn't be loaded, so i removed that module. Now XFree86 runs, but with many warnings. XFree86 Version 4.2.1.1 (Debian 4.2.1-12.1 20031003005825 james@nocrew.org) / X Window System (protocol Version 11, revision 0, vendor release 6600) Release Date: 18 October 2002 If the server is older than 6-12 months, or if your card is newer than the above date, look for a newer version before reporting problems. (See http://www.XFree86.Org/) Build Operating System: Linux 2.4.21-rc1-ac1-cryptoloop i686 [ELF] ..... Symbol __glXLastContext from module /usr/X11R6/lib/modules/extensions/libGLcore.a is unresolved! Symbol __glXFree from module /usr/X11R6/lib/modules/extensions/libGLcore.a is unresolved! Symbol __glXFree from module /usr/X11R6/lib/modules/extensions/libGLcore.a is unresolved! Symbol __glXMalloc from module /usr/X11R6/lib/modules/extensions/libGLcore.a is unresolved! Symbol __glXFree from module /usr/X11R6/lib/modules/extensions/libGLcore.a is unresolved! Symbol __glXMalloc from module /usr/X11R6/lib/modules/extensions/libGLcore.a is unresolved! Symbol __glXFree from module /usr/X11R6/lib/modules/extensions/libGLcore.a is unresolved! Symbol __glXFree from module /usr/X11R6/lib/modules/extensions/libGLcore.a is unresolved! Symbol __glXMalloc from ...

Problems after Update XFree 4.1.x to 4.2.1.1
Hallo, since i set my debian release from stable to testing, i had some problems with XFree4.2.1.1 that i can't get solved. After installation XFree4.2.1.1 didn't start, because the GLX module couldn't be loaded, so i removed that module. Now XFree86 runs, but with many warnings. XFree86 Version 4.2.1.1 (Debian 4.2.1-12.1 20031003005825 james@nocrew.org) / X Window System (protocol Version 11, revision 0, vendor release 6600) Release Date: 18 October 2002 If the server is older than 6-12 months, or if your card is newer than the above date, look for a newer version...

Newbie question; why (cons (list 1 2) (list 3 4)) is ((1 2) 3 4) and not ((1 2) (3 4))
Hi, I just started to learn LISP, and stumbled in SICP upon (cons (list 1 2) (list 3 4)) is evaluated to ((1 2) 3 4) I do not understand why this is not: ((1 2) (3 4)) because (cdr (cons (list 1 2) (list 3 4))) is (3 4) and (car (cons (list 1 2) (list 3 4))) is (1 2) Is there a logical explanation? Thank you for your patience. -- Greg Out of order, gregor <gregor@ediwo.com> writes: > Is there a logical explanation? Yes. > I just started to learn LISP, and stumbled in SICP upon But first, let's talk about LISP, Lisp, Scheme and Common Lisp. LISP is the name of the programming language invented in 1959 by John McCarthy and of the first program implementing it written amongst other by Steve Russel, one of his students. LISP 1.5 is a segueing version of that same program dating about 1962 that had some distribution. Then various lisp languages were developed at various places by various teams. Names such as MacLisp, InterLisp, LeLisp, StandardLisp, vLisp, Lisp Machine Lisp, Scheme, GNU Emacs Lisp, etc. It was quite a mess, and people had a hard time sharing programs. So they talked and designed and wrote and voted and produced the ANSI Common Lisp standard (in the USA), meanwhile in Europe they produced the ISO Lisp standard. Nowadays, almost all the other lisps are "dead", with only scheme (current version r5rs, r7r...

PPPD 2.4.1 and 2.4.2 with wvdial 1.53 problem
Hello I have downloaded pppd 2.4.2 (and 2.4.1 after I failed to connect with 2.4.1) and it compiled (both the kernel and the user parts) OK. Without any changes to my wvdial 1.53 conf file, I try to use the new pppd. Result: Feb 13 15:53:16 gw wvdial[2629]: WvDial: Internet dialer version 1.53 Feb 13 15:53:16 gw wvdial[2629]: Initializing modem. Feb 13 15:53:16 gw wvdial[2629]: Sending: AT Feb 13 15:53:16 gw wvdial[2629]: ERROR Feb 13 15:53:16 gw wvdial[2629]: ERROR Feb 13 15:53:16 gw wvdial[2629]: OK Feb 13 15:53:16 gw wvdial[2629]: Sending: ATB0 Feb 13 15:53:16 gw wvdial[2629]: ERROR Fe...

(??] [1/4]
begin 644 TEST.txt M2&5L;&\@=&AI<R!I<R!A('1E<W0@9FEL92!F;W(@;7D@;F5W('!R;V=R86TN $+BXN+@`` ` end Posted Via Usenet.com Premium Usenet Newsgroup Services ---------------------------------------------------------- ** SPEED ** RETENTION ** COMPLETION ** ANONYMITY ** ---------------------------------------------------------- http://www.usenet.com ...

differense of look between 1.4.2 and 1.4.1
Hello, when compiling and running with jdk 1.4.2 (or higher) the look is totally different then when i use 1.4.1 fe mouse over on buttons seems different, the look of the radiobuttons is different , how can i solve this fe how i call a button trashbutton.setIcon(new ImageIcon(images.getString("TRASH20"))); trashbutton.setPressedIcon(new ImageIcon(images.getString("TRASH20_IN"))); trashbutton.setRolloverIcon(new ImageIcon(images.getString("TRASH20_OUT"))); trashbutton.setDisabledIcon(new ImageIcon(images.getString("TRASH20_DIS"))); tras...

Serialization between Java 1.1.4 and Java 1.4.1
Hello, It seems to me to be in some kinda trouble. I wanted to implement communication between Java applet and Server through sockets and Serialization. So, I serialize Object, send it to server which deserialize it with no problems. In other direction problems came out since Object serialized under Java 1.4.1 seems to be not deserializable under Java 1.1.4. (MS VM). If applet si run under J2, there are no problems, but I cannot push people to download some 15MB of new JRE just to accomplish my requirements, especially if applet needs not implementation of features of new JRE... ...

Change from 1.4.1 to 1.4.2 in Runtime.exec
I have a signed applet that needs to use Runtime.exec. In 1.1 and 1.4.1 this was not a problem. I have since upgraded to 1.4.2 and now get the following exception: java.security.AccessControlException: access denied (java.io.FilePermission <<ALL FILES>> execute) at java.security.AccessControlContext.checkPermission(Unknown Source) at java.security.AccessController.checkPermission(Unknown Source) at java.lang.SecurityManager.checkPermission(Unknown Source) at java.lang.SecurityManager.checkExec(Unknown Source) at java.lang.Runtime.exec(Unknown Source) at java.lang.Run...

(??] [4/4]
begin 644 Untitled2.txt ,2&5L;&\@07-I82$A ` end Posted Via Usenet.com Premium Usenet Newsgroup Services ---------------------------------------------------------- ** SPEED ** RETENTION ** COMPLETION ** ANONYMITY ** ---------------------------------------------------------- http://www.usenet.com ...

JRE 1.4.2 compatible with 1.4.1 (backward/forward)?
Are these 2 versions compatible with each other in both directions? If I develop with 1.4.2, can it run against 1.4.1 JRE? Thanks. johnhurt@gmail.com wrote: > Are these 2 versions compatible with each other in both directions? If > I develop with 1.4.2, can it run against 1.4.1 JRE? Thanks. I believe that 1.4.x are all compatible. In the principle of versions 1.4.2 correct ONLY BUGS from 1.4.1 (previous version). So as it's only corrections on bugs and not ADDITION of functions there are no risk. But If you develop under 1.5 there could be several problem if you use the new functions added just in 1.5 version and want compatibility with 1.4 versions. It's like upgrade system on Linux. When a distribution is out they just upgrade to correct bugs but they "never" (in stable version) propose a new version who add new functions because it can cause several problems to cohabitate with the different packages on the system. ...

Does 4/2/2= (4/2)/2 =1 OR = 4/(2/2)=4
I don't have matlab and I am trying to translate some simple matlab code. Does 4/2/2 = (4/2)/2 = 1 or 4/2/2 = 4/(2/2) = 4 On 9/11/2012 9:43 AM, sarah.englander@gmail.com wrote: > I don't have matlab and I am trying to translate some simple matlab code. > > Does 4/2/2 = (4/2)/2 = 1 yes. At a given precedence level (and obviously two of the same operators are the same level) evaluation proceeds from LtoR. ....snip... <http://www.mathworks.com/help/techdoc/matlab_prog/f0-40063.html#f0-38155> -- dpb <none@non.net> wrote in message <...

(??] [1/4]
begin 644 TEST.txt M2&5L;&\@=&AI<R!I<R!A('1E<W0@9FEL92!F;W(@;7D@;F5W('!R;V=R86TN $+BXN+@`` ` end Posted Via Usenet.com Premium Usenet Newsgroup Services ---------------------------------------------------------- ** SPEED ** RETENTION ** COMPLETION ** ANONYMITY ** ---------------------------------------------------------- http://www.usenet.com ...

BSS problem in DJGPP port of GCC 4 (was: Re: Question about djcross-gcc-4.1.1-2) #2
>It seems to be bug in binutils. It does not appear even in C++ when option >-fno-exceptions is specified (so no .eh_frame section). Actually, the -fno-exceptions causes files like eh_alloc.o not to be linked into the resulting executable. The stdc++ library is compiled with several compiler flags, one of them being -fdata-sections. Consider the following small test program: --- cut begin--- static int int_array[500000]; int main (void) { return 0; } --- cut end--- Compiling this C file *without* the -fdata-sections option gives the desired output: $ i586-pc-msdosdjgpp-size...

(??] [2/4]
begin 644 TEST2.txt 186YO=&AE<B!T97-T+BXN+BX` ` end Posted Via Usenet.com Premium Usenet Newsgroup Services ---------------------------------------------------------- ** SPEED ** RETENTION ** COMPLETION ** ANONYMITY ** ---------------------------------------------------------- http://www.usenet.com ...

(??] [4/4]
begin 644 Untitled2.txt ,2&5L;&\@07-I82$A ` end Posted Via Usenet.com Premium Usenet Newsgroup Services ---------------------------------------------------------- ** SPEED ** RETENTION ** COMPLETION ** ANONYMITY ** ---------------------------------------------------------- http://www.usenet.com ...

[tao-users] The differences between TAO 1.4.1.2 and 1.5.1.0 #2
This is a multi-part message in MIME format. ------_=_NextPart_001_01C74A75.80E5ABB0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello all, =20 Could someone tell me where can I find a document which describes about the differences between TAO 1.4.1.2 and 1.5.1.0? =20 Thanks with regards, Shi Lei ------_=_NextPart_001_01C74A75.80E5ABB0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"> <META content=3D"MSHTML 6.00.2900.3020" name=3DGENERATOR></HEAD> <BODY> <DIV><FONT face=3DArial size=3D2><SPAN class=3D604250205-07022007>Hello=20 all,</SPAN></FONT></DIV> <DIV><FONT face=3DArial size=3D2><SPAN=20 class=3D604250205-07022007></SPAN></FONT>&nbsp;</DIV> <DIV><FONT face=3DArial size=3D2><SPAN class=3D604250205-07022007>Could = someone tell=20 me where can I find a document which describes about the differences = between TAO=20 1.4.1.2 and 1.5.1.0?</SPAN></FONT></DIV> <DIV><FONT face=3DArial size=3D2><SPAN=20 class=3D604250205-07022007></SPAN></FONT>&nbsp;</DIV> <DI...

Problem while installing rdoc-2.4.1 under Ruby 1.9.1
[Note: parts of this message were removed to make it a legal post.] Hello team! While installing, via gem, rdo-2.4.1 I ran into an error. Please see bellow. C:\>ruby -v ruby 1.9.1p0 (2009-01-30 revision 21907) [i386-mingw32] C:\>gem install rdoc Successfully installed rdoc-2.4.1 1 gem installed Installing ri documentation for rdoc-2.4.1... Updating ri class cache with 1261 classes... Installing RDoc documentation for rdoc-2.4.1... ERROR: While executing gem ... (TypeError) can't convert Pathname into String C:\> Any suggestions? Thank you -- Ruby Student On Mar 16...

a little bug of ACE-5.4.1+TAO-1.4.1+CIAO-0.4.1.tar.gz
Hi Team, When I compile this version, it prompts me the following errors that /*------ gmake[6]: *** No rule to make target `Client_Request_Interceptor.cpp', needed by `.obj/Client_Request_Interceptor.o'. Stop. ------*/ Then I find there is something wrong about the directory: /export/home/adam/ace.5.4.1.cc.64/TAO/tests/Portable_Interceptors/Request_Interceptor_Flow There are two files whose file names suffix are very strange. 1. Client_Request_Interceptor.cp 2. Server_Request_Interceptor.cp After I rename them from .cp to .cpp I wonder if this is a bug or some thing I configure wrong? Regards, Adam Sorry, After I fix some problem of such kind, I still met the problem that has conflict with its internal config. Plus this tar is different from that I downloaded a week ago. I wonder why BFO is so unstable? Regards, Adam Hi Adam, >> Sorry, After I fix some problem of such kind, I still met the problem >> that has conflict with its internal config. Upgrade. >> Plus this tar is different from that I downloaded a week ago. Nothing has changed with ACE 5.4.1 in several years. >> I wonder why BFO is so unstable? Because it's several years old. Please upgrade. Thanks, Doug -- Dr. Douglas C. Schmidt Professor and Associate Chair Electrical Engineering and Computer Science TEL: (615) 343-8197 Institute for Software Integrated Systems WEB: www.dre...

IMDbPY 4.1 and IMDbPYKit 1.1.1
IMDbPY 4.1 and IMDbPYKit 1.1.1 are available (tgz, deb, rpm, exe) from: http://imdbpy.sourceforge.net/ IMDbPY is a Python package useful to retrieve and manage the data of the IMDb movie database about movies, people, characters and companies. IMDbPYKit (mostly developed by H. Turgut Uyar) is a web interface to IMDbPY, able to serve its output both in HTML and XML. With this release, a DTD for the XML output was formalized and support for i18n was introduced. A lot of bugs were fixed. Platform-independent and written in pure Python (and few C lines), IMDbPY can retrieve data from both the IMDb's web server and a local copy of the whole database. IMDbPY package can be very easily used by programmers and developers to provide access to the IMDb's data to their programs. Some simple example scripts are included in the package; other IMDbPY-based programs are available from the home page. -- Davide Alberani <alberanid@libero.it> [GPG KeyID: 0x465BFD47] http://erlug.linux.it/~da/ ...

Encapsulated PDF Storage 1.2.840.10008.5.1.4.1.1.104.1
Hi all! In a conformance statement of an application I'm able to find SOP Class Encapsulated PDF Storage 1.2.840.10008.5.1.4.1.1.104.1. The conformance statement tells me that it is being supported as an SCU as well as a SCP. Can I expect that the application can create Enc. PDF documents of its own assesments? My supplier tells me that this application can only store received enc. PDF documents with this SOP Class. I thought that this SOP class also was for creation of the Enc. PDF document. Or do I need another SOP Class for this functionallity (Creation of Enc. PDF doc of own locally stored assesments)? gr Mike On May 19, 3:25=A0am, mmjsupp...@gmail.com wrote: > Hi all! > In a conformance statement of an application I'm able to find SOP > Class Encapsulated PDF Storage 1.2.840.10008.5.1.4.1.1.104.1. The > conformance statement tells me that it is being supported as an SCU as > well as a SCP. > > Can I expect that the application can create Enc. PDF documents of its > own assesments? > > My supplier tells me that this application can only store received > enc. PDF documents with this SOP Class. I thought that this SOP class > also was for creation of the Enc. PDF document. Or do I need another > SOP Class for this functionallity (Creation of Enc. PDF doc of own > locally stored assesments)? > > gr Mike Conformance to a Storage SOP Class as an SCU or SCP only addresses the "s...

Film scanner for 2 1/4 inch by 2 1/4 inch #2
Hi, I have hundreds of APS, 35mm, and 2 1/4 by 2 1/4 inch negatives that I would like to scan. I posted an item on this newsgroup in October, 2003. So far, I have not yet bought a new scanner. My main requirement is that it handles 21/4 inch separate negatives. PC Pro magazine reviewed the Canon Canoscan 8800F recently. See http://www.pcpro.co.uk/reviews/128849/canon-canoscan-8800f.html It gave a good review. I phoned Canon to see if it could handle separate 2 1/4 inch negatives. They said it could. Has anyone used this scanner? If so, that do you think about it. Whi...

Load average differences between Apache 1.3.37/PHP 4.4.6 and Apache 2.2.4/PHP 5.2.1
Hi folks, I've encountered something rather strange. This morning, I upgraded our production server, providing web services for our library website, from Apache 1.3.37/PHP 4.4.6 to Apache 2.2.4/PHP 5.2.1. The server, which normally exhibits a load average below 1 most of the time, spiked to loads that approached 100 if left alone. The interesting part of this is that this load average seems to be almost artificial - it appears to be caused by httpd processes stuck in a "closing connection" state (TIME_WAIT, in netstat). These processes are still running according t...

Web resources about - kpasswd problem on 1.4.1/1.4.2 - comp.protocols.kerberos

ste williams
TCP UDP Description Status 0 UDP Reserved Official 1 TCP UDP TCP Port Service Multiplexer (TCPMUX) Official 2 TCP UDP Management Utility Official ...

Table of Contents
Backto Strong Auth Index Page - ComputingDivision - Fermilab atWork - FermilabHome Strong Authentication at Fermilab Table of Contents Acknowledgments ...

modman.unixdev.net - Browse Manual: FreeBSD-5.4-RELEASE
My UNIXdev > My Account New Account About News Message Board Projects > CVS Browse Documentation > OS Manpages Java SE 1.5 API Java EE 1.4 API ...

Samba - Release Notes Archive
============================= Release Notes for Samba 4.0.0 December 11, 2012 =============================This is is the first stable release ...

Resources last updated: 3/10/2016 10:36:10 PM