This document discusses Frequently Asked Questions (FAQ) about accounts in the campus Active Directory.
1. DO KERBEROS
ACCOUNT LOGIN FAILURES LOCK THE ACCOUNT?
No. Login failures when using your Kerberos account to log into the campus Active Directory will not lock your Windows account.
2. IS IT POSSIBLE TO LOGIN WITH CACHED CREDENTIALS WHEN USING A KERBEROS LOGIN?
No. You will be able to log into the machine with the cached credentials. However, your will not have a Kerberos ticket. This means you will not be authorized to use any resources. To see a list of tickets that you have when you log in with your Kerberos account, use the KLIST.EXE utility with the command “klist.exe tickets”.
3. HOW DO I CHANGE THE PASSWORD FOR A KERBEROS ACCOUNT?
There are two methods to change you Kerberos password.
Method A (You know your old password):
Open a web browser to https://computingaccounts.ucdavis.edu/cgi-bin/services/index.cgi.
Choose the Change your password option.
Follow the on-screen instructions.
When given
the option for Authorization Method,
choose Kerberos Password.
Method B (You do not know your old password):
Visit IT-Express at Shields Library (Or a Local Account Proxy).
They will issue a password change token.
Open a web browser to https://computingaccounts.ucdavis.edu/cgi-bin/services/index.cgi.
Choose the Change you password option.
Follow the on-screen instructions.
When given
the option for Authorization Method,
choose Password Change Token.