search for: getprinc

...the krb5-server-1.9-22.el6_2.1.x86_64 RPM.? I have created a testuser in the Kerberos domain, and applied the policy as shown below.? If I then attempt to log on to the server via SSH or to get a ticket via kinit and purposefully munge my password multiple times, it does not lock me out.? Nor does getprinc reflect the failed attempts.? I can't find much documentation on this feature, there doesn't seem to be any configuration options in kdc.conf or elsewhere other than in the User Policy.? Even there, the kadmin man page is out of date and doesn't include the password lockout duration fla...

...alm = false dns_lookup_kdc = true # clock-skew = 600 [realms] NET.DOMAIN.COM.PL = { kdc = pr254.net.domain.com.pl default_domain = DOMAIN admin_server = pr254.net.domain.com.pl } Bind as Dns backend. Kerberos: kadmin: getprincs K/M at NET.DOMAIN.COM.PL administrator/admin at NET.DOMAIN.COM.PL administrator at NET.DOMAIN.COM.PL kadmin/admin at NET.DOMAIN.COM.PL kadmin/changepw at NET.DOMAIN.COM.PL kadmin/pr254.net.domain.com.pl at NET.DOMAIN.COM.PL krbtgt/NET.DOMAIN.COM.PL at NET.DOMAIN.COM.PL pr254:~# less /var/lib/samb...