[4441] in Kerberos
Re: How do you use KDC_OPT_RENEW?
daemon@ATHENA.MIT.EDU (Theodore Ts'o)
Thu Jan 5 22:27:32 1995
Date: Thu, 5 Jan 1995 22:10:25 +0500
From: Theodore Ts'o <tytso@MIT.EDU>
To: Jim-Miller@suite.com
Cc: kerberos@MIT.EDU
In-Reply-To: Jim-Miller@suite.com's message of 28 Dec 1994 00:02:56 GMT,
<3dq9vg$qo5@bilbo.suite.com>
Date: 28 Dec 1994 00:02:56 GMT
From: Jim-Miller@suite.com
I'm looking through the Kerberos 5 code to see how to use the
KDC_OPT_RENEW feature. It doesn't look like there is an API for renewing
tickets. My best guess is that you renew a ticket by calling
"krb5_send_tgs" directly, passing in the ticket you want to renew via the
"usecred" argument.
Is there a better way of renewing a ticket? Has anyone else played with
the KDC_OPT_RENEW feature?
No, not really. There ought to be a higher-level API routine to do
this, but there isn't yet. (There isn't one implemented for forwarding
tickets yet, either, but for that we do have it designed at least, and
will be appearing soon to an FTP site near you....)
- Ted
