search for: getprincs

Hello, ? I have recently set up a system to test the relatively new ability of Kerberos to track failed password attempts and lock out users for a given period of time if they exceed a threshold.? My system is Centos 6.2 running the krb5-server-1.9-22.el6_2.1.x86_64 RPM.? I have created a testuser in the Kerberos domain, and applied the policy as shown below.? If I then attempt to log on to the

...alm = false dns_lookup_kdc = true # clock-skew = 600 [realms] NET.DOMAIN.COM.PL = { kdc = pr254.net.domain.com.pl default_domain = DOMAIN admin_server = pr254.net.domain.com.pl } Bind as Dns backend. Kerberos: kadmin: getprincs K/M at NET.DOMAIN.COM.PL administrator/admin at NET.DOMAIN.COM.PL administrator at NET.DOMAIN.COM.PL kadmin/admin at NET.DOMAIN.COM.PL kadmin/changepw at NET.DOMAIN.COM.PL kadmin/pr254.net.domain.com.pl at NET.DOMAIN.COM.PL krbtgt/NET.DOMAIN.COM.PL at NET.DOMAIN.COM.PL pr254:~# less /var/lib/samba...