How to expire passwords for Kerberos user accounts

2016-03-28 Thread Ramaiah, Vanna G.
We have a state mandated rule that we have to expire the password of user accounts every 180 days. Could you please let me know how to do that for all current users and new users in Kerberos? Should I apply a policy using -maxlife? Thank, Vanna Ke

RE: How to expire passwords for Kerberos user accounts

2016-03-28 Thread Ramaiah, Vanna G.
Is that correct? -Original Message- From: Greg Hudson [mailto:ghud...@mit.edu] Sent: Monday, March 28, 2016 4:54 PM To: Ramaiah, Vanna G.; kerberos@mit.edu Subject: Re: How to expire passwords for Kerberos user accounts On 03/28/2016 02:30 PM, Ramaiah, Vanna G. wrote: > We have a state mandated

RE: How to expire passwords for Kerberos user accounts

2016-03-28 Thread Ramaiah, Vanna G.
t.edu] Sent: Monday, March 28, 2016 5:05 PM To: Ramaiah, Vanna G.; kerberos@mit.edu Subject: Re: How to expire passwords for Kerberos user accounts On 03/28/2016 05:00 PM, Ramaiah, Vanna G. wrote: > Thank you. How to exclude service accounts from this password expiration? I > guess, If I don

RE: How to expire passwords for Kerberos user accounts

2016-03-28 Thread Ramaiah, Vanna G.
Got it. For the new users, do I have to run "kadmin: modprinc -expire "180 days" newprinc" or will the pwexpire field be set when the account is created? -Original Message- From: Greg Hudson [mailto:ghud...@mit.edu] Sent: Monday, March 28, 2016 5:12 PM To: Ramaiah

RE: How to expire passwords for Kerberos user accounts

2016-03-30 Thread Ramaiah, Vanna G.
st password changed and not the current date? Am I correct? -Original Message- From: Greg Hudson [mailto:ghud...@mit.edu] Sent: Monday, March 28, 2016 4:54 PM To: Ramaiah, Vanna G.; kerberos@mit.edu Subject: Re: How to expire passwords for Kerberos user accounts On 03/28/2016 02:3

How to disable the reset password option when the password is expired

2016-03-30 Thread Ramaiah, Vanna G.
Our environment relies on AD and we want the passwords to be changed in AD, that propagates the password to Kerberos. When the password is expired in Kerberos, Kerberos is giving option to users to reset the password. Is there any way this can be disabled? There will be confusion if users have t

How to find all users in a policy

2016-07-08 Thread Ramaiah, Vanna G.
We recently applied a password policy to a few users. How can I get a list of all users that has policy applied? Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

password change logs

2017-04-17 Thread Ramaiah, Vanna G.
Where can I find the password change logs in Kerberos server? - This message was secured via TLS by MUSC. Kerberos mailing list Kerberos@mit.edu https://mailm

powershell calling cpw - white space in password problem

2017-10-11 Thread Ramaiah, Vanna G.
I have a non-interactive powershell that changes password using cpw. It works fine. When the password contain white space character in it, it fails because it sees white space as delimiter. The following command works fine. The part -q is in single quotes. If there is a space in UserPassword it

RE: powershell calling cpw - white space in password problem

2017-10-11 Thread Ramaiah, Vanna G.
s-boun...@mit.edu [mailto:kerberos-boun...@mit.edu] On Behalf Of Ramaiah, Vanna G. Sent: Wednesday, October 11, 2017 5:37 PM To: kerberos@mit.edu Subject: powershell calling cpw - white space in password problem I have a non-interactive powershell that changes password using cpw. It works fin