The end users can change their own passwords using the kpasswd utility and the syntax is as follows:
kpasswd principal_name
You will be prompted to enter your existing password and new password. The kpasswd utility uses the Kerberos Password Server for changing the Kerberos passwords.