Problem: Password change via self-service is not working on the master but on the school-slave

Problem:

Password change via self-service is not working on the master but on the school-slave
the passwordchange does not work via normal password-change mechanism either.

The error message you get is:
Passwort ändern fehlgeschlagen. Der Grund konnte nicht festgestellt werden.
Errorcode 10: Authentisierung ist fehlgeschlagen. Bitte melden Sie sich erneut an.

Investigation:

root@master:~# kinit cschein

Does this result in a Ticket?

root@master:~# kpasswd cschein
cschein@SCHEIN.IG's Password:
kpasswd: krb5_get_init_creds: Client (kay.univention@SCHEIN.IG) unknown

Solution:

If this Variable was empty you should set
ucr set kerberos/kdc='127.0.0.1
and restart samba
/etc/init.d/samba restart

Mastodon