The chgtdcpass python script fails to clear all historical records from the keytab. It clears the record with latest kvno - 1 if it exists, then stops.
Clarification: Running the chgtdcpass script adds a new entry to the keytab but only clears a single record of the old entries.
Created attachment 14167 [details]
Test and patch attached.
The advise is that this isn't a security issue so I've removed the group restriction.