1. Home
  2. Server Administration
  3. Active Directory. Windows server 2003 Windows 2000

Recipe 6.19 Setting a User's Password via Kerberos

6.19.1 Problem

You want to change a password using Kerberos from a Unix machine.

6.19.2 Solution

If you have MIT Kerberos 5 client installed and configured properly, you can run the following commands, which will change your password in Active Directory:

$ kinit
Password for jsmith@RALLENCORP.COM: ****
$ kpasswd
Password for jsmith@RALLENCORP.COM: ****
Enter new password: ******
Enter it again: ******
Password changed.

6.19.3 Discussion

See Recipe 18.7 for more information on Kerberos.

6.19.4 See Also

MS KB 264480 (Description of Password-Change Protocols in Windows 2000), RFC 3244 (Microsoft Windows 2000 Kerberos Change Password and Set Password Protocols), and IETF draft-ietf-cat-kerb-chg-password-02.txt



    		Chapter 1. Getting Started
    		Chapter 2. Forests, Domains, and Trusts
    		Chapter 3. Domain Controllers, Global Catalogs, and FSMOs
    		Chapter 4. Searching and Manipulating Objects
    		Chapter 5. Organizational Units
    		Chapter 6. Users
    		Introduction
    		Recipe 6.1 Creating a User
    		Recipe 6.2 Creating a Large Number of Users
    		Recipe 6.3 Creating an inetOrgPerson User
    		Recipe 6.4 Modifying an Attribute for Several Users at Once
    		Recipe 6.5 Moving a User
    		Recipe 6.6 Renaming a User
    		Recipe 6.7 Copying a User
    		Recipe 6.8 Unlocking a User
    		Recipe 6.9 Finding Locked Out Users
    		Recipe 6.10 Troubleshooting Account Lockout Problems
    		Recipe 6.11 Viewing the Account Lockout and Password Policies
    		Recipe 6.12 Enabling and Disabling a User
    		Recipe 6.13 Finding Disabled Users
    		Recipe 6.14 Viewing a User's Group Membership
    		Recipe 6.15 Changing a User's Primary Group
    		Recipe 6.16 Transferring a User's Group Membership to Another User
    		Recipe 6.17 Setting a User's Password
    		Recipe 6.18 Setting a User's Password via LDAP
    		Recipe 6.19 Setting a User's Password via Kerberos
    		Recipe 6.20 Preventing a User from Changing His Password
    		Recipe 6.21 Requiring a User to Change Her Password at Next Logon
    		Recipe 6.22 Preventing a User's Password from Expiring
    		Recipe 6.23 Finding Users Whose Passwords Are About to Expire
    		Recipe 6.24 Setting a User's Account Options (userAccountControl)
    		Recipe 6.25 Setting a User's Account to Expire in the Future
    		Recipe 6.26 Finding Users Whose AccountsAre About to Expire
    		Recipe 6.27 Determining a User's Last Logon Time
    		Recipe 6.28 Finding Users Who Have Not Logged On Recently
    		Recipe 6.29 Setting a User's Profile Attributes
    		Recipe 6.30 Viewing a User's Managed Objects
    		Recipe 6.31 Modifying the Default Display Name Used When Creating Users in ADUC
    		Recipe 6.32 Creating a UPN Suffix for a Forest
    		Chapter 7. Groups
    		Chapter 8. Computers
    		Chapter 9. Group Policy Objects (GPOs)
    		Chapter 10. Schema
    		Chapter 11. Site Topology
    		Chapter 12. Replication
    		Chapter 13. Domain Name System (DNS)
    		Chapter 14. Security and Authentication
    		Chapter 15. Logging, Monitoring, and Quotas
    		Chapter 16. Backup, Recovery, DIT Maintenance, and Deleted Objects
    		Chapter 17. Application Partitions
    		Chapter 18. Interoperability and Integration
    		Appendix A. Tool List