Administering the Kerberos Server

Changing Password InformationChanging Password Information

You can change the following password information used by a principal:

•Password expiration date

Indicates when the password of the current principal is due to expire. Check the Password Expiration Date box to activate password expiration for the current principal. If you do not enable this option, the current password of the principal will never expire.

•Key version number

Indicates the number of times a password has been changed by the principal.

•Key types

Indicates the key encryption options, namely, 3DES, DES-MD5and

DES-CRC.

•Salt types

Indicates the value used by the secret algorithm to create a unique encrypted key even for identical passwords within a single system. Salts also allow unique keys on two separate systems to use the same password.

 

 

To change the password information, complete the following steps:

Step

1.

In the HP Kerberos Administrator window, choose the Principals tab.

Step

2.

In the Principals tab, select the realm where the principal resides.

Step

3.

Click List All or Search to find the principal.

Step

4.

Select the principal name from List of Principals and click Edit to

 

 

display the Principal Information window as shown in Figure 8-2.

Step

5.

In the Principal Information window>Password tab, change the

 

 

password information for the current principal.

Step

6.

Click OK to accept the new password information.

158

Chapter 8