Hello Robbie.
That's also the strange part, the kpasswd does not work after that.
Best regards.
Lune
Le mer. 24 oct. 2018 à 19:38, Robbie Harwood rharwood@redhat.com a écrit :
lune voo via FreeIPA-users freeipa-users@lists.fedorahosted.org writes:
Hello everyone.
I send you this mail because I encountered a strange problem trying to
set
a password for a user I just created.
First, I created the user with ipa user-add and for the following result
:
Added user <myuser>
Then I added this user into a password policy group and it worked fine : Then I set a One Time Password for this account and it worked.
Finally I tried to set a complex password fitting the password policy
with
the kpasswd command. And here, I encountered the following error message
:
kpasswd: Client not found in Kerberos database getting initial ticket
My kpasswd command was like that : printf "%s\n%s\n%s" '<one_time_password>' '<password>' '<password>' | kpasswd <myuser>
It works fine usually, this is the first time I see this error message.
I wanted to ask you if you knew what this error message mean ? For me it is that the user does not exist, but I prefer ask you guys.
Correct. It's "unknown principal" - Kerberos went tried to look up the user on the server and got nothing.
The strange things is that, after that, I tried to ipa user-unlock the account, and it worked o_O.
Well, did kpasswd work after that?
Thanks, --Robbie