[37782] in Kerberos
RE: Can I automatically cache AD tickets into a file on windows?
daemon@ATHENA.MIT.EDU (Mauro Cazzari)
Fri Nov 18 11:49:37 2016
From: Mauro Cazzari <Mauro.Cazzari@sas.com>
To: Todd Grayson <tgrayson@cloudera.com>
Date: Fri, 18 Nov 2016 16:49:11 +0000
Message-ID: <0f0bdbd6916340529cae263ba34210fc@MERCMBX45R.na.SAS.com>
In-Reply-To: <CALNT6MUJxF-vn-dsFkJrB8HVgcCfEapk=ve3-rONCpDEso0S5Q@mail.gmail.com>
Content-Language: en-US
MIME-Version: 1.0
Cc: "Kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Thanks Todd. I was thinking the same thing, but I just wasn’t sure.
From: Todd Grayson [mailto:tgrayson@cloudera.com]
Sent: Friday, November 18, 2016 11:34 AM
To: Mauro Cazzari <Mauro.Cazzari@sas.com>
Cc: Kerberos@mit.edu
Subject: Re: Can I automatically cache AD tickets into a file on windows?
From what I understand, the windows SSPI implementation does not provide a facility to hold the credentials in a file. You would use the MIT KFW to be able to do that.
On Friday, November 18, 2016, Mauro Cazzari <Mauro.Cazzari@sas.com<mailto:Mauro.Cazzari@sas.com>> wrote:
Kerberos experts,
Is there a way to automatically cache AD-generated tickets to the file provided through the KRB5CCNAME environment variable on Windows without having to run a kinit? My understanding is that Windows caches tickets in memory (whereas Unix does the same on file). Do I need to install MIT Kerberos, or (ideally) can I just use the copy of Kerberos that comes with Windows to achieve my goal?
Thanks!
Mauro.
________________________________________________
Kerberos mailing list Kerberos@mit.edu<javascript:;>
https://mailman.mit.edu/mailman/listinfo/kerberos
--
Todd Grayson
Business Operations Manager
Customer Operations Engineering
Security SME
[http://files.cloudera.com.s3.amazonaws.com/New%20Branding/cloudera-small.png]
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
