kerberos and web authentication

2020-08-13 Thread Rita
I created a user keytab. I use curl to authenticate against a web server. `curl -u : --negotitate` it works randomly (about 33% accuracy). I am trying to figure out if its a webserver issue or kerberos issue. Is there anything else I can do? -- --- Get your facts first, then you can distort them

RE: cpw ignoring password policies

2020-08-13 Thread Dario García Díaz-Miguel
Hello Greg, Thank you so much for your quick reply. What I found with some tests is that while length and character classes rules are being correctly applying using cpw, other rules like minlife are not respected. For example, I set a policy with the following rules: Policy: TEST Maximum passwo

Re: cpw ignoring password policies

2020-08-13 Thread Greg Hudson
On 8/13/20 1:51 AM, Dario García Díaz-Miguel wrote: > I can change all the time the password of the principal with that policy > applied despite the minimum password life described. That's true. The kadmin server code deliberately only checks the minimum life if a principal is changing its own p