fedora-infrastructure

#5934 kinit login doesn't work
Closed: Fixed Opened by callkalpa.

Closed: Fixed
Reopen Issue 
$ kinit callkalpa@FEDORAPROJECT.ORG 
Password for callkalpa@FEDORAPROJECT.ORG: 
kinit: Password incorrect while getting initial credentials

I changed my FAS password a couple of hours ago. And I logged into FAS and I am sure that the password is correct.

I remember I do the same password change some time ago and then also I faced the same issue and someone (I am sorry I cannot recall the name of the person) at #fedora-admin did some manual actions to get kinit working for me. I am not sure whether it is the same scenario I am run into.

I followed the Debugging Problems section in [1] and here is the output if it helps,

$ ./KrbDebug 
test_01_installed (__main__.TestKerberos) ... ok
test_02_using_collection (__main__.TestKerberos) ... ok
test_03_configuration (__main__.TestKerberos) ... FAIL
test_04_kinit (__main__.TestKerberos) ... ok
======================================================================
FAIL: test_03_configuration (__main__.TestKerberos)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "./KrbDebug", line 78, in test_03_configuration
    self.fail('Unable to find krb5 configuration file for Fedora')
AssertionError: Unable to find krb5 configuration file for Fedora
----------------------------------------------------------------------
Ran 4 tests in 1.409s
FAILED (failures=1)

I highly appreciate the support to get this issue solved.

[1] https://fedoraproject.org/wiki/Infrastructure/Kerberos#Debugging_problems

According to my logs, your last password change was with a password reset?
If that's the case, can you please login to FAS and change your password.
Resetting your password does not update your password for kinit due to security reasons.

If this was not the case, please update the ticket with the output of KRB5_TRACE=/dev/stdout kinit callkalpa@FEDORAPROJECT.ORG.

Metadata Update from @puiterwijk:
- Issue tagged with: authentication

@puiterwijk, , you are correct, I did a password reset at the first place. Now I changed the password and kinit login worked! Thank you.

What is the security reason that resetting the password doesn't update the password for kinit?

This is mostly related to some implementation details.
I might at some point look at improving this, but for now I've just updated the FAQ.

Metadata Update from @puiterwijk:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
Metadata
None

authentication

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.