[37781] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Can I automatically cache AD tickets into a file on windows?

daemon@ATHENA.MIT.EDU (Todd Grayson)
Fri Nov 18 11:34:36 2016

MIME-Version: 1.0
In-Reply-To: <055634c695524cb8812026d581108577@MERCMBX45R.na.SAS.com>
From: Todd Grayson <tgrayson@cloudera.com>
Date: Fri, 18 Nov 2016 09:34:21 -0700
Message-ID: <CALNT6MUJxF-vn-dsFkJrB8HVgcCfEapk=ve3-rONCpDEso0S5Q@mail.gmail.com>
To: Mauro Cazzari <Mauro.Cazzari@sas.com>
Cc: "Kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

>From what I understand, the windows SSPI implementation does not provide a
facility to hold the credentials in a file.  You would use the MIT KFW to
be able to do that.

On Friday, November 18, 2016, Mauro Cazzari <Mauro.Cazzari@sas.com> wrote:

> Kerberos experts,
> Is there a way to automatically cache AD-generated tickets to the file
> provided through the KRB5CCNAME environment variable on Windows without
> having to run a kinit? My understanding is that Windows caches tickets in
> memory (whereas Unix does the same on file). Do I need to install MIT
> Kerberos, or (ideally) can I just use the copy of Kerberos that comes with
> Windows to achieve my goal?
> Thanks!
> Mauro.
> ________________________________________________
> Kerberos mailing list           Kerberos@mit.edu <javascript:;>
> https://mailman.mit.edu/mailman/listinfo/kerberos
>


-- 
Todd Grayson
Business Operations Manager
Customer Operations Engineering
Security SME
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post