Is there a known problem with the password-changing interface from Windows
to an MIT KDC, either 1.3.4 or 1.4.2? Based on testing by one of my
colleagues who works in the Windows environment, it seems that
password-changing, either using the native Windows Kerberos
password-change facilities or even the MIT-supplied KfW (2.6.5) kpasswd
command and the Leash GUI, the following message is received on the
Server error: Failed decrypting request
The KDC logs show a successful issuing of the kadmin/changepw service
credential, but no further action indicating a change password
I believe we've never been able to get native Windows password-changing to
work against our MIT KDCs.
I wonder if this is just a configuration issue on our KDC.