[19381] in Kerberos

home help back first fref pref prev next nref lref last post

How to test if TGT has expired by using Kerberos API's?

daemon@ATHENA.MIT.EDU (Kent_Wu@trendmicro.com)
Fri Jun 6 20:59:01 2003

content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Date: Fri, 6 Jun 2003 17:58:12 -0700
Message-ID: <7DE4EF03D8D61B44B927E4A059B2644C3489CF@65-200-113-18.trendmicro.com>
From: <Kent_Wu@trendmicro.com>
To: <krbdev@mit.edu>
Content-Transfer-Encoding: 8bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu

Hi:

	I've written a program to get TGT then do the Kerberos authentication by using GSS-API afterwards but I also want to do it in a smarter way. What I tried to achieve is I want to check if it expires or not, if so then I issue a real TGT request otherwise I can save a trip. Or if there is an API which already checks this internally that would be even greater. By searching some materials I found some possible API's but I don't really know due to the limited documentation. Can somebody enlighten me a little bit on this?

	Another way I can think of is always doing gss_init_sec_context() first and if it returns "ticket expired" then I can issue a TGT request, just that the first approach sounds more logic to me and I also want to explore Kerberos API a bit more.

Thx and have a nice weekend.

Kent

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post