[38152] in Kerberos
-allow_tgs_req
daemon@ATHENA.MIT.EDU (Chris Hecker)
Mon Jan 8 22:52:40 2018
To: "kerberos@mit.edu" <kerberos@mit.edu>
From: Chris Hecker <checker@d6.com>
Message-ID: <f1f0a286-6de0-d147-1a84-bbcb37d59c90@d6.com>
Date: Mon, 8 Jan 2018 19:52:12 -0800
MIME-Version: 1.0
Content-Language: en-US
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
If -allow_tgs_req / DISALLOW_TGT_BASED is set on a service princ then I
shouldn't be able to kinit with it, right? I'm able to get TGTs though
with kinit and the keytab for this service, and then get service tickets
with kvno; I need to update my KDC and see if this is still true, or
mabye I'm misunderstanding how it works...?
Thanks,
Chris
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
