opendev/system-config
Code Issues Proposed changes

Document Kerberos password reset process

Browse Source 
As happens, if you don't use your Kerberos credentials often you may
lose track of your password for them. Document how, as a system
administrator with a shell on one of the KDCs, you can set a new
passwords for your accounts without needing to recreate the
principals.

Change-Id: I843b5be9630c805335a6cca04237477002748242
This commit is contained in:
Jeremy Stanley 2018-06-06 16:06:44 +00:00
parent ee1ba99c04
commit f4bc2917ef
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
doc/source/kerberos.rst
View File

@ -98,6 +98,15 @@ Then save the principal's keytab::
kadmin: ktadd -k /path/to/$NAME.keytab service/$NAME@OPENSTACK.ORG
Resetting A User Principal's Password
-------------------------------------
If you've forgotten your user password (it happens!) then from a
shell on one of the KDCs, execute ``sudo kadmin.local`` and use the
``cpw $USERNAME@OPENSTACK.ORG`` command and enter your new password
twice as prompted. If you need to reset your admin principal, use
``cpw $USERNAME/admin@OPENSTACK.ORG`` instead.
No Service Outage Server Maintenance
------------------------------------