[Freeipa-users] Change Password problems (Unsupported Version)

[Dmitri Pal]

On 09/27/2011 03:24 AM, Goff, Raal wrote:
> Hi,
>
> My IPA 2.0 master-slave setup has been working fine up until this week when users started getting problems updating their password due to expiry. Users get the following error when using kpasswd to update their passwords:
>
> kinit: krb5_get_init_creds: Unable to reach any changepw server  in realm EXAMPLE.COM
>
> The only error I seem to find in the logs is unhelpful:
>
> Sep 27 15:16:12 ipa1 kpasswd[2689]: Unsupported version
> Sep 27 15:16:43 ipa1 kpasswd[2692]: Unsupported version
>
> Additionally, it seems some users can reset their passwords, but the error still appears in the logs, and on the client software:
>
> Sep 27 15:08:52 ipa1 kpasswd[2630]: Unsupported version
> Sep 27 15:09:23 ipa1 kpasswd[2633]: Unsupported version
> Sep 27 15:09:54 ipa1 kpasswd[2637]: Password change succeeded
>
> It looks like 'Unsupported version' is a reference to 'krb5_kdb_bad_version: Unsupported version in database entry' in the kerberos software, but I can't find any more information regarding it.
>
> Has anyone come across this before? Is there any way to recover from it?
>

Is there anything related to KRB4 around? Can it be that your client is
KRB4?

> Regards,
>
> -R
>
>
> ZettaServe Disclaimer: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately if you have received this email by mistake and delete this email from your system. Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. ZettaServe Pty Ltd accepts no liability for any damage caused by any virus transmitted by this email.
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
>
>


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/