[32904] in Kerberos

home help back first fref pref prev next nref lref last post

Re: multiple principals in one cache?

daemon@ATHENA.MIT.EDU (Ken Hornstein)
Mon Nov 15 13:59:44 2010

Message-Id: <201011151859.oAFIxWvT018662@hedwig.cmf.nrl.navy.mil>
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
To: "kerberos@mit.edu" <kerberos@mit.edu>
In-Reply-To: <1289846576.2633.1171.camel@ray>
Date: Mon, 15 Nov 2010 13:59:32 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

>For example, if I'm logged in with tickets as ghudson@ATHENA.MIT.EDU and
>I ksu to root by entering the password for ghudson/root@ATHENA.MIT.EDU,
>I wind up with a new ccache containing all of my old tickets (for client
>principal ghudson) plus a TGT and host service ticket for client
>principal ghudson/root.

Hm.  Fair enough.  Dumb question: why does it do that?  I mean, as we've
discussed on this thread nearly all applications can't utilitize such a
ccache.

--Ken
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post