Problems when using kadmin instead of kadmin.local

Hi everyone, I'm just starting using MIT KRB by working through this book: http://www.kerberos-buch.de/ I launched two virtual machines on my host to test setting up Kerberos before installing and using it on the production machine. The machines both are installed with Debian GNU/Linux 7.7 (

Failed authentication attempts, lockouts and old passwords

I've been asked if it would be possible for the MIT krb5 KDC not to increment the failed authentication count (and presumably the time) when one of the older passwords was used. I know such behaviour is not documented. The question arose because the MS Active Directory KDC can do this. Quoting fr

Re: Failed authentication attempts, lockouts and old passwords

On 12/16/2014 10:31 AM, Kenneth MacDonald wrote: > I've been asked if it would be possible for the MIT krb5 KDC not to > increment the failed authentication count (and presumably the time) when > one of the older passwords was used. I know such behaviour is not > documented. [...] > I'm wondering