[22077] in Kerberos
Re: tickets not showing up
daemon@ATHENA.MIT.EDU (David Tsai)
Tue Jul 27 21:29:48 2004
Message-ID: <01b001c47442$0db8e0a0$43367409@davidlaptop>
From: "David Tsai" <dwtsai@mit.edu>
To: <kerberos@mit.edu>
Date: Wed, 28 Jul 2004 10:27:28 +0900
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Thanks for the quick replies, I really appreciate it.
In a normal scenario where my windows xp client is authenticating against (and getting a ticket from) the linux KDC server, should I expect the ticket to be on the windows java sdk's klist or on the linux server's klist? I am a bit confused on how to view the kerberos system, because I could see how both scenarios would make sense (the windows machine has the ticket and therefore it's in its klist, but the kdc klist might show the ticket because the server is the one that issued it and it keeps track of issued tickets).
Also, even though the tutorial's ticket isn't cached, how would I go about giving the ticket to other classes so they can use it? I basically want to use this same ticket and pass it to other classes. Is it simply a matter of passing the Subject() instance around, or do I need to cache it somehow and formally forward it somehow? I am a bit concerned about this because the subject.getPrivateCredentials() shows a string printout of:
.
.
.
Fowardable Ticket false
Forwarded Ticket false
Proxy Ticket false
Postdated Ticket
Renewable Ticket false
Initial Ticket false
.
.
.
Renew Till = Null
Client Addresses Null ]
I haven't researched enough of the GSS API to know all the parameters, but intuitively it doesn't seem like a very "healthy" or useable ticket...
Any insight on these questions would be greatly appreciated.
--David
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
