[2216] in Kerberos
stupid question regarding expired tickets in ticket cache
daemon@ATHENA.MIT.EDU (Jeffrey I. Schiller)
Wed Sep 23 18:21:19 1992
Date: Wed, 23 Sep 92 18:00:10 -0400
From: Jeffrey I. Schiller <jis@mit.edu>
To: louie@sayshell.umd.edu
Cc: kerberos@Athena.MIT.EDU
In-Reply-To: "Louis A. Mamakos"'s message of Tue, 22 Sep 92 14:11:44 -0400 <9209221811.AA26041@sayshell.umd.edu>
Date: Tue, 22 Sep 92 14:11:44 -0400
From: "Louis A. Mamakos" <louie@sayshell.umd.edu>
> You are not being stupid. The problem doesn't happen in our
> environment because it is almost universally the case that every
> ticket expires at the same time as the TGT does.
Hmm.. good. I think. Does it make sense for the ticket cache code to
not return expired tickets?
I would think so. Idealy if the ticket cache contains a valid TGT, then
the kerberos library might as well fetch a newer service ticket.
...
Or does kinit zap the entire ticket cache when a new TGT is acquired?
If it doesn't, won't there still be expired service tickets lurking in
the ticket cache? Looking at the V4 kinit.c code, it doesn't seem to
zap the existing cache.
kinit does indeed zap the entire ticket cache.
-Jeff
