[32879] in Kerberos

home help back first fref pref prev next nref lref last post

multiple principals in one cache?

daemon@ATHENA.MIT.EDU (Abe Singer)
Wed Nov 10 17:23:05 2010

Date: Wed, 10 Nov 2010 14:22:40 -0800
From: Abe Singer <abe@ligo.caltech.edu>
To: kerberos@mit.edu
Message-ID: <20101110222239.GB26076@ligo.caltech.edu>
MIME-Version: 1.0
Content-Disposition: inline
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu


According to kinit(1), when doing a kinit "Any existing tickets for _principal_
are overwritten."  However, we've found that *all* tickets are destroyed.
So if one does a kinit for user@REALM-1, then does a kinit for user@REALM-2, the
tickets for user@REALM-1 get deleted from the cache.

We'd *like* to be able kinit multiple principals for use with services
in different realms (e.g. working realm and test realm).  Is the behavior
we're seeing intentional (an the documentation is buggy) or a bug?

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post