PennKeys

From Provider Wiki

Common PennKey Questions

Q:How long to PennKey password changes take to propagate through all of Penn's systems (specifically to the mail servers)?

A: When one changes a PennKey password, it is stored at the KDC, so the change is immediate. Any PennKey-authenticated services authenticate via the KDC, so the the new password should be used right away. Mail servers do not store the PennKey password, but rather talk to the KDC when authenticating via Kerberos (while I can't speak for all the mail servers on campus, I know that the webmail interface for ISC's mail servers uses Kerberos). Please note that changing your PennKey password and changing your mail server password are two separate things -- one will only use his/her PennKey password to log in to a mail server when using a Kerberos-enalbed application (i.e. webmail, Thunderbird with a ticket manager, etc.)