[36420] in Kerberos

home help back first fref pref prev next nref lref last post

Man page description of kinit -R

daemon@ATHENA.MIT.EDU (Brett Randall)
Wed Sep 3 23:11:36 2014

MIME-Version: 1.0
Date: Thu, 4 Sep 2014 10:41:19 +1000
Message-ID: <CALeEUB5wDLrdkPwEKi7TquzQN1VnHXmkiCcsO6_wKGw_ntCndA@mail.gmail.com>
From: Brett Randall <javabrett@gmail.com>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Hi,

krb5-1.10.1 here.

My local man page for kinit (as well as
http://web.mit.edu/kerberos/krb5-1.12/doc/user/user_commands/kinit.html
) has the following description of the kinit -R option:

-R: requests renewal of the ticket-granting ticket. Note that an
expired ticket cannot be renewed, even if the ticket is still within
its renewable life.

Does the comment "an expired ticket cannot be renewed" remain true,
and if so, can someone help me understand "expired" in this context?
If I have a ticket which has an "Expires" date-time (as reported by
klist) which is in the past, but a "renew until" date which is in the
future, I can successfully renew the ticket using kinit -R.  I see
this as renewal of an expired, but renewable and
within-renewable-period ticket.

Is that expected, and is the above comment now a doc-bug?

Thanks
Brett
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post