[19192] in Kerberos
Re: Apps aquiring tickets (was Re: gssapi/openssh)
daemon@ATHENA.MIT.EDU (Gintautas Grigelionis)
Mon May 5 08:35:41 2003
Message-ID: <3EB65993.EBB14BB0@computer.org>
Date: Mon, 05 May 2003 14:31:15 +0200
From: Gintautas Grigelionis <g.grigelionis@computer.org>
To: kerberos@MIT.EDU
Errors-To: kerberos-bounces@mit.edu
Ken Raeburn wrote:
> jfh@cise.ufl.edu ("James F.Hranicky") writes:
>
> > Users of Kerberized apps have to "do something" when the TGT expires, why
> > not let them be prompted?
>
> I believe the Mac OS version of MIT Kerberos can do this -- but it's
> done by the Kerberos implementation, not by code in every application.
> I think it would be a reasonable idea to make such a facility
> available on other platforms, but it shouldn't require changes to
> application code.
>
> Ken
Sun has ktkt_warnd - Kerberos warning daemon; from man page:
ktkt_warnd is a daemon on Kerberos clients that can warn
users when their Kerberos tickets are about to expire. It is
invoked by inetd when a ticket-granting ticket (TGT) is
obtained for the first time, such as after using the kinit
command. ktkt_warnd can be configured through the
/etc/krb5/warn.conf file on the client.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
