change NT passwds Kerberos

["bryantac67@yahoo.com" <bryantac67@yahoo.com>]

Hi,

I am using kerberos to authenticate against our PDC
(it has Kerberos setup on it). I am able login fine
and everything, but I cannot change my password. This
is the error I get:

Jul 29 11:11:19 passwd[7437]: (pam_krb5)
pam_sm_authenticate: krb5_get_init_creds_password: KDC
can't fulfill requested option
Jul 29 11:11:19 passwd[7437]: (pam_krb5)
pam_krb5_get_authtok: Authentication failure
Jul 29 11:11:19 passwd[7437]: (pam_krb5)
pam_sm_chauthtok: pam_krb5_get_authtok returns
Authentication failure
Jul 29 11:11:19 passwd[7437]: (pam_krb5)
pam_sm_chauthtok: result for user `xxxx':
Authentication failure
Jul 29 11:11:19 passwd[7437]: User xxxx:
Authentication failure

I looked around a little, and I read that the ticket
need to be forwardable and renewable. I tried adding
these options to my pam, but it made no difference. I
am authenticating against our AD, which of course is
Microsoft.  I don't konw what kind of Kerberos is
installed there, but something is since I can
authenticate.  Could there be interoperability issues
between Heimdal and MS kerberos?  I am running Heimdal
on the client. Any ideas???

Thanks,
Aaron

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com