Rocksolid Light

Welcome to Rocksolid Light

mail  files  register  newsreader  groups  login

Message-ID:  

echo "Your stdio isn't very std." -- Larry Wall in Configure from the perl distribution


devel / comp.protocols.kerberos / Re: Force to change password for users

SubjectAuthor
o Re: Force to change password for usersCarlos Lopez

1
Re: Force to change password for users

<mailman.93.1713546379.2322.kerberos@mit.edu>

  copy mid

https://news.novabbs.org/devel/article-flat.php?id=1161&group=comp.protocols.kerberos#1161

  copy link   Newsgroups: comp.protocols.kerberos
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: clopmz@outlook.com (Carlos Lopez)
Newsgroups: comp.protocols.kerberos
Subject: Re: Force to change password for users
Date: Fri, 19 Apr 2024 17:06:10 +0000
Organization: TNet Consulting
Lines: 25
Message-ID: <mailman.93.1713546379.2322.kerberos@mit.edu>
References: <PRAP251MB056715F9F72A4C47C0AE558CDB0D2@PRAP251MB0567.EURP251.PROD.OUTLOOK.COM>
<eea80750-d5a6-48f9-b2c4-4efc399655e5@mit.edu>
<PRAP251MB0567B093E24E8C80B382C245DB0D2@PRAP251MB0567.EURP251.PROD.OUTLOOK.COM>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 8bit
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="22339"; mail-complaints-to="newsmaster@tnetconsulting.net"
To: Greg Hudson <ghudson@mit.edu>, "kerberos@mit.edu" <kerberos@mit.edu>
DKIM-Filter: OpenDKIM Filter v2.11.0 unknown-host (unknown-jobid)
Authentication-Results: mailman.mit.edu;
dkim=pass (1024-bit key, unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=H1Q/GfUz;
dkim=fail reason="signature verification failed" (2048-bit key,
unprotected) header.d=outlook.com header.i=@outlook.com header.a=rsa-sha256
header.s=selector1 header.b=hKc89c4u
ARC-Seal: i=3; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=brTK47Kds1q4yqvRPjqqXnLPBfyDJ5KujZrdVdOIfWJlBAuxZWd7+ZM4yuXdDn1oyezoLtsdFFPAg49vTrfML4gPOxEujvDBSuvQZumR8n7pi4ECjmi+eJBPozmwu23VmXyidEMYaAxMvGFy3zSm5PF7MxElZHG5HhuJ4JJOw7pQr61g83VE4NQz7ydRd/dX2C4thWqSf6JvwgBOUnrImtjwOOGcR7NvxIoXknMCqqF83OAfgWvS1N7SHgoHKvCeE054n4TyBTM84ap6myDC8XEXxPHvH0yH4HhQVTKYWOJVv8Hcr+SoCbf9eNj2UclY+xVGAOIJexOZDJiZnZH6rw==
ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=54OoWPeDOmEPrFrIx550/BYZI91mooOv1yxIR8tW4XY=;
b=GqKWN3k0Y/LrHMAOaxJHKqukM/VCKLfXu7cqc/39D4MQT0QtDnwstxTfOo/vIZbS24jzfmfReVQinSPi3pe/j0mmOevstSWPDKrFjSEe2JioCvtx1GE6+lxAP2qILKWumY182IyMh0S/hV3gyByYGFKpHhAZaCx7R9tCYsb+2KkV30bIrxsQYjlQB+7OW1N60sBO613QJuKq6sHQQ3lofJHpJjFxwknOLxYkxM/OQQiThWSocM9qAKvCv10QQm6J8TsF2Zx1Jfx8AqjYsX5DdPm8DC1CCgpOHs2ifs8AkUobL6/ZoxBnbkjHGnnyF6ibgEkXm6ntaUky4c+918PAiw==
ARC-Authentication-Results: i=3; mx.microsoft.com 1; spf=pass (sender ip is
40.92.73.37) smtp.rcpttodomain=mit.edu smtp.mailfrom=outlook.com; dmarc=pass
(p=none sp=quarantine pct=100) action=none header.from=outlook.com; dkim=pass
(signature was verified) header.d=outlook.com; arc=pass (0 oda=0 ltdi=1)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=54OoWPeDOmEPrFrIx550/BYZI91mooOv1yxIR8tW4XY=;
b=H1Q/GfUz6BSJRL+0F7bBhOKY/+8JIM3fbr0uAg5mJtP8rNQH/P4lx1e3uIQ9a2tr3V9MvavAr0cad25BaQeqRR+vlg2AxvPzJTGdyCQ8jwzxV5mSsUJS12b+lutfDOZbS34+XSBUKXKuL2wPIS4rJPTPayNd47VvY1RIMPAxU+0=
ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=G2Bwwaqjjh4jvRQ2FCDbvK7Bj62a8PMC4tPe5X0Gz5D23XC+jooapNDK7y9GJ5c+4BtO3Kg08y85KBgHjY3ivA+F1N+Vh0owaQKsn4oDZnGKU20StHdWoy1AtQW710ftpvYare34O7XZOq3zXE3RkGDduM0ZWZITICIzNS5cYDfMepO77GEZB6j3xllVBIQA4dvev2Uc6CsclZuYQAG3V5SUMnEM0Jce2UCNoG6OgcmH6IbalnCpwnG0OyBpRu+5p0+rkqePbvHbMxMVlP3cYYOxuEtYATqSWzIClu2cllIYX4JWKf806+QsR7RRIbQu/K7ru+KXtNRmr31cCtPfSA==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=54OoWPeDOmEPrFrIx550/BYZI91mooOv1yxIR8tW4XY=;
b=ArX3Ts846NhpSpLTva8WOVh7CoRLjUn1WhdITZlyN+APkVOFBoLzbfYrtrQmX38l8WNel4yWEYLxo3XgA4KuTvmPNe0a7Jh3nfh+QAeGVojx1ReQXGerztDr9uTSNNKih45QSFPbxZbOakUZKGnmU4hw+RMximgZD5IRFb9qVHe8tvBXB0bm2LYy6vhDWXvMh79UDQxiMtuSXITAMjaafbqzceibjsKJddPwwckz5j2/Sa50Dx+xxViXxIYkTOTac7h/AmA3sQyD+cgTb246FBE9Z+Mxcq0deo0K6Ei/NU85lxZPQ73yZTzeISHVXdXPxvO/8CdJJ8kU8+47Mm3qCQ==
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is
40.92.73.37) smtp.rcpttodomain=mit.edu smtp.mailfrom=outlook.com; dmarc=pass
(p=none sp=quarantine pct=100) action=none header.from=outlook.com; dkim=pass
(signature was verified) header.d=outlook.com; arc=pass (0 oda=0 ltdi=1)
Authentication-Results: spf=pass (sender IP is 40.92.73.37)
smtp.mailfrom=outlook.com; dkim=pass (signature was verified)
header.d=outlook.com;dmarc=pass action=none header.from=outlook.com;
Received-SPF: Pass (protection.outlook.com: domain of outlook.com designates
40.92.73.37 as permitted sender) receiver=protection.outlook.com;
client-ip=40.92.73.37; helo=EUR04-HE1-obe.outbound.protection.outlook.com;
pr=C
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=VEeBi9W+Bngy43aMNa4WsgqUMfDXPzZ5m853R4c+1OKmF0Qw6zPfOE5NHpiUxIvLY2PN2yTuMlYBaHBTZP4wBJSYppWI97LANh+9YtTMO0XpdhcxI2UrMZIW8mwWbdocC9rD8u2SLc+L1TZXgDGOtawYSOrUQVuIhwv9MuQDNA8SuC+swDndj8YiG1nsBkrfhGz3LnB6SLnMrn17SDmuKyq+wQN31d1794jD5gzhOpJL4GkQ0l6hYvd487YG9Xz6jfF9jK3kNd+1++YUHIQ+7/zqNk69L3LVTLMWy20XhR+o6YvwRAlVVFUQdJmJyMMUhGM3fbmZvskU1kr0g7q9Uw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=54OoWPeDOmEPrFrIx550/BYZI91mooOv1yxIR8tW4XY=;
b=gjK2KosTb76vXTt697KD4T0bJTnFhGMGOKXplGvFGjZbgM5XJiCcFNcQvkbK/SrQIt416Yqqa/0Z3MT6sotdFqeDMfnqg3ib3Rm44AWWXJMeOm8csL/+LjHfLc8LszjQRYkea/nMnuoUTaPh/mHn0oEiS9DC52cIDiClEqSTAk/hoaoRRiMuIdRg0oBDoJyiAEquexErTIh5+zXAsckoYM6RG2GN0Jw0JpRRLlI50pG5NWVZA634UeDtusrgODhgzg8BFQ3Uzt6pdJ+t0wIBL5CsLwOLvgdqGYR5YqSe6fgCIM7uMe7R1V7S/U3wWxfq+Sw10bdqYudg4NMaZOh5kQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=54OoWPeDOmEPrFrIx550/BYZI91mooOv1yxIR8tW4XY=;
b=hKc89c4uFUa4Igcir9dxW9ONvpMYMEzTpBhNYE0omk/oU8dEgtJSV/YRXXbM3Pxoz3Z15h42cRHUMDcWVmlPcgO0K9pt4r/+/QO1DOMK2pZw1TlGA+BByYgVHY9KJ4WZlw/YimTUKmV1vPwv4/MC7o2Xbc+m9WaBaofGaln7T28gJLWlCzEnYADvQws/n1aGKb3gsk/gWkcjvl6sRFDF3ue2mVKZHJn5aYk7ZiE+t1EvN3V2T6uziUPvXxaiyMtuGee8Py+y9FnAmF+g7LwdumZ5jviA2i3QhCFLs5QEZc2Hc9fvUz3PvtCuUXxTR0Osb4AVrIUhLFn0UGKEEfMinA==
Thread-Topic: Force to change password for users
Thread-Index: AQHaklE0ss3MXm/VO0u6/yEaPDdcdrFvyEEAgAAKmRo=
In-Reply-To: <eea80750-d5a6-48f9-b2c4-4efc399655e5@mit.edu>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-ms-exchange-messagesentrepresentingtype: 1
x-tmn: [dejCwjnrID9zMqjpwwSArPYDtT/uw9vT]
x-ms-traffictypediagnostic: PRAP251MB0567:EE_|GVXP251MB0744:EE_|DS2PEPF00003448:EE_|SA3PR01MB7965:EE_
X-MS-Office365-Filtering-Correlation-Id: d6181e91-0ff6-4e0e-b02c-08dc609305f3
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 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
X-MS-Exchange-AntiSpam-MessageData-Original-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-Original-0: kUhUSSC9TZuqGpfSTEZFEHxwZnhoRy8lFzgUZ/z5Y1vgCFDlEbg4YAX+mYWV
TIK1gsnNKGNNIeEIdv+PxPuP2DIwXcIfVPUuRhR9280DjwrSzLm7cUX8QT5K
WjtP9sDLFxnvUGmgCgFSImsFEoZzxNZJNhVzBm37PmVu+F4IN+9FS364lbb9
NgGUg8WQWz0YOOG5Lk7OW/Lks3WwrEQrmNfh+VIk9hc3GpKpyG4XdWeZ+E8W
0B+p0VvQjiv6W+/zMm6rv8iWSOGXgxYN3Pugbpe1Zc8TBIquNBWb/+siB9Tr
jWhngk7E3Ylo05aBgMCQKW5gvNQtfXuc8LRrrAigGBzUOCrwwsEkDC0KnbbT
0Oa/5rgLq6gACCWL9IG5TPp7/ZlIxugj2BXA8icqCTp8QbqYlk8lCXIs1ST1
WTRaj6WgVJS+ChMfETaYFMCieKlks8gAjV5eSsrRG2f1REHQroBm/DFce2Me
jnFTjNOT+0qi9+/DL9hBR8eC3J/2x3AiD6+0sv9ipPIOu5B97tdufPkl5Xp9
+CVu/9wrSDechX2kNJ0ZNT+S6DwAtcL/yga1uTvYz2kcIs7WdpcZU5YnpYVw
tMUlgbm9FAFPakFo+TX3MM1ddGDq+EkHY+tdgZyz1ppBoQ3K+lTUOzVujlfa
wuzG0DeSfzzG3XvBG6pis0Qq60YWz7eITs4BZqZXdTRrPUvlmVAQzFTiuWuV
ZEIzMdJ58uQsbmPUSOQn/Qywk1rp1YQrBtd9y9RjBHZYgB3GkEeDFsdMhAhD
0ww4Wf29gLsEv8weN5KJsnoDyWscyo391I78N0zwFO5zizbAsNq7QmbBzWym
SZ0nd4r2kt0OQMK2+wFV1MpUg6EsYDGfcKHAKPX3YsdgND7/rtvbnYG4UY2w
m0t39OR9sg4tcIPsvQ6MWNGYgDCLlIgd5eI5slPUUG37BWoLKNK3PGOsNvvf
7fCKI0uAeW1fjDKjzjmMT84mRD+3J0m1ysBlnZva8xgIwtB2N97atlesVVBU
sCeLBprqhLaiK5in+bKVpj6A/ZebrZuAWspJ5YEbGtcIyS0euP/W/2RP1plN
pfgzGtHpAcnc0XM0RPkXu5w6ycnXIXpZ6n5Nh6JW+aTXA963bcUXIFpcXYue
T0SN9gljgrd4fSubM0sU8EUmyuBQaM4nOyL3J+qKaedqspUXxYLditPX2SfG
dqR466rvuEdsUnGXLagRGbqwX7CYZvElTU9v8w==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: GVXP251MB0744
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: DS2PEPF00003448.namprd04.prod.outlook.com
X-MS-Exchange-Transport-CrossTenantHeadersPromoted: DS2PEPF00003448.namprd04.prod.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs: 4d4217cf-69db-45a4-d608-08dc609302bb
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: CughilzUtamg+3je/wxJIQgexn9AO5tyR/WT5RTSsvZvt9unoX/VwxctNYCH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X-Forefront-Antispam-Report: CIP:40.92.73.37; CTRY:FI; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:EUR04-HE1-obe.outbound.protection.outlook.com;
PTR:mail-he1eur04olkn2037.outbound.protection.outlook.com; CAT:NONE;
SFS:(13230031)(48200799009)(376005)(7093399003)(61400799018); DIR:OUT;
SFP:1102;
X-ExternalRecipientOutboundConnectors: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: mitprod.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Apr 2024 17:06:15.1708 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: d6181e91-0ff6-4e0e-b02c-08dc609305f3
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-AuthSource: DS2PEPF00003448.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA3PR01MB7965
X-MIME-Autoconverted: from quoted-printable to 8bit by mailman.mit.edu id
43JH6HTC2012611
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <PRAP251MB0567B093E24E8C80B382C245DB0D2@PRAP251MB0567.EURP251.PROD.OUTLOOK.COM>
X-Mailman-Original-References: <PRAP251MB056715F9F72A4C47C0AE558CDB0D2@PRAP251MB0567.EURP251.PROD.OUTLOOK.COM>
<eea80750-d5a6-48f9-b2c4-4efc399655e5@mit.edu>
 by: Carlos Lopez - Fri, 19 Apr 2024 17:06 UTC

User acquires kerberos ticket and login session is authorized. This log is for a ssh access ...

Best regards,
C. L. Martinez

________________________________________
From: Greg Hudson <ghudson@mit.edu>
Sent: 19 April 2024 18:27
To: Carlos Lopez; kerberos@mit.edu
Subject: Re: Force to change password for users

On 4/19/24 08:06, Carlos Lopez wrote:
> [...] AS_REQ [...] REQUIRED PWCHANGE: user1@MYDOM.ORG for krbtgt/MYDOM.ORG@MYDOM.ORG, Password has expired
> [...] AS_REQ [...] NEEDED_PREAUTH: user1@MYDOM.ORG for kadmin/changepw@MYDOM.ORG, Additional pre-authentication required
> [...] AS_REQ [...] ISSUE: [...] user1@MYDOM.ORG for kadmin/changepw@MYDOM.ORG
>
> But in the client side, user can login without problems and no password change is requested.

These are the messages I would expect in the log, including user1
getting a ticket to perform a password change.

You say the user can log in. Do they have tickets, or do you just mean
a login session is authorized based on the Kerberos interaction? What
client-side software is being used?

1
server_pubkey.txt

rocksolid light 0.9.81
clearnet tor