[35864] in Kerberos
Re: Kerberos5 ticket auto renewal
daemon@ATHENA.MIT.EDU (Rick van Rein)
Tue Mar 18 08:51:11 2014
Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\))
From: Rick van Rein <rick@openfortress.nl>
In-Reply-To: <CA+j=ERrHGtmvUVL8RDQrrC+nso=502=auWWdO-UM1SDNLJb1LQ@mail.gmail.com>
Date: Tue, 18 Mar 2014 13:50:54 +0100
Message-Id: <978E1E09-82D0-4BBB-A4C7-7DE16617DFAF@openfortress.nl>
To: Wendy Lin <wendlin1974@gmail.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="windows-1252"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Wendy,
Tickets are not renewed automatically because you need to demonstrate knowledge of the password on a regular basis; someone who somehow gained illegal access is thereby always constrained to a short time slot.
Service tickets are requested upon first contact with a server; if you don’t access a service you won’t request (or renew) its tickets.
-Rick
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
