Installing, Configuring and Administering the Kerberos Server V 2.0 on HP-UX 11i

Administration
Attributes Tab (Principal Information window)
Chapter 6 149
change password service. If this attribute is not set,
then the server issues a server ticket based on the TGT
they already posses.
The Require Initial Authentication attribute only
applies to service principals. If this attribute is selected
for a principal being edited or created, the Allow as
Service attribute is automatically selected.
Set As Password Change Service Attribute The Set As Password
Change Service attribute specifies whether the
server is allowed to issue initial tickets to this service
principal for user principals whoose passwords have
expired.