[38250] in Kerberos
Re: Question about TGT forwarding
daemon@ATHENA.MIT.EDU (Benjamin Kaduk)
Wed Jun 6 17:29:25 2018
Date: Wed, 6 Jun 2018 16:29:12 -0500
From: Benjamin Kaduk <kaduk@mit.edu>
To: Jason Edgecombe <jwedgeco@uncc.edu>
Message-ID: <20180606212912.GG72167@kduck.kaduk.org>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <CAAR6MGCvdh289v2He2J-p0q0GBh8fUESAo8egvw9QL=qr0XE6w@mail.gmail.com>
Cc: Kerberos List <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Wed, Jun 06, 2018 at 05:08:19PM -0400, Jason Edgecombe wrote:
>
> Running "klist" when logged on to Windows 10 with my domain account shows
> the following flags for my krbtgt/DOMAIN entry:
>
> Ticket Flags 0x60a10000 -> forwardable forwarded renewable pre_authent
> name_canonicalize
That's the windows-native klist binary -- it might be interesting to
see the KfW klist output, which you can get if you run it with the
full path (e.g., C:\Program Files\MIT\Kerberos\bin\klist.exe IIRC)
-Ben
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
