The chgtdcpass python script fails to clear all historical records from the keytab. It clears the record with latest kvno - 1 if it exists, then stops.
Clarification: Running the chgtdcpass script adds a new entry to the keytab but only clears a single record of the old entries.
Created attachment 14167 [details] proposed patch Test and patch attached.
The advise is that this isn't a security issue so I've removed the group restriction.
8bd67c593da5525a63a1d596e2c7fe38bc7cee57 a3d6fdd5355d366f3d23915cecc10c6f039daa44