成功kinit user1后
我尝试使用 kpasswd user1 更改 passwd
$ kpasswd user1
Password for <a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="82f7f1e7f0b3c2c7dac3cfd2cec7acc1cdcfcc" rel="noreferrer noopener nofollow">[email protected]</a>:
Enter new password:
Enter it again:
kpasswd: Cannot contact any KDC for requested realm changing password
如何调试这个问题？
如何查看 kpasswd 的日志？
最佳答案
我可以设置 ENV KRB5_TRACE 并查看日志。
$ KRB5_TRACE=/dev/stdout kpasswd user1
...
...
Enter new password:
Enter it again:
[19347] 1542261437.864732: Creating authenticator for ... -> kadmin/changepw@..., seqnum 0, subkey aes256-cts/BC93, session key aes256-cts/6786
[19347] 1542261437.866856: Resolving hostname ...
[19347] 1542261437.867433: Sending initial UDP request to dgram ...
[19347] 1542261440.870780: Sending retry UDP request to dgram ...
[19347] 1542261445.876049: Sending retry UDP request to dgram ...
kpasswd: Cannot contact any KDC for requested realm changing password
关于kerberos - kpasswd - 无法联系任何 KDC 请求领域更改密码，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/53311851/