[3722] in Kerberos
Refreshing a single credential?
daemon@ATHENA.MIT.EDU (Derrick J. Brashear)
Tue Aug 16 16:31:05 1994
Date: Tue, 16 Aug 1994 16:16:23 -0400 (EDT)
From: "Derrick J. Brashear" <db74+@andrew.cmu.edu>
To: kerberos@MIT.EDU
Cc:
Hi,
It's come up that a service key may have it's kvno incremented, and
people who have the service key with the old kvno in their ticket files
will lose. Has anyone come up with a way to deal with this?
Here's what I proposed:
Use krbtgt in our ticket file to get a new krbtgt, in a fresh ticket file.
either:
A)
Get a list of the creds in our old ticket file, and get these fresh in
the new ticket file
Then nuke the old ticket file, and move the new one into its place
or:
B)
Get just the credential for which the kvno has changed in the new ticket
file, use the ticket file, then nuke it.
Any better ideas, or preferences?
-D
