[17058] in Kerberos-V5-bugs
[krbdev.mit.edu #9187] Re: Cannot renew ticket using mit kfw 4.1
daemon@ATHENA.MIT.EDU (Everyday Engineering via RT)
Sat Nov 1 02:45:16 2025
From: "Everyday Engineering via RT" <rt-comment@krbdev.mit.edu>
In-Reply-To: <CAHugKjR_vVTZCavbEOOF0xrhh=0=dtkVURkQrozsgu-N43eXrw@mail.gmail.com>
Message-ID: <rt-4.4.3-2-3803451-1761979510-1880.9187-4-0@mit.edu>
To: "AdminCc of krbdev.mit.edu Ticket #9187":;
Date: Sat, 01 Nov 2025 02:45:10 -0400
MIME-Version: 1.0
Reply-To: rt-comment@krbdev.mit.edu
Content-Type: text/plain; charset="utf-8"
Errors-To: krb5-bugs-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Sat Nov 01 02:45:10 2025: Request 9187 was acted upon.
Transaction: Ticket created by eubnara@gmail.com
Queue: krb5
Subject: Re: Cannot renew ticket using mit kfw 4.1 (kerberos for windows)
Owner: Nobody
Requestors: eubnara@gmail.com
Status: new
Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9187 >
I rebuild mit kfw 4.1 with the latest code (
https://github.com/krb5/krb5/commit/0415c857d320347bbd7ab33bde677b977387d940,
commit 0415c85) and I can renew kerberos tickets inside FILE credential
cache on mit kfw 4.1.
I uploaded msi installer on
https://github.com/eubnara/krb5/releases/tag/20251030 release.
I suggest that mit kfw 4.1 official version should also be updated with the
latest krb5 codes on https://web.mit.edu/kerberos/dist/.
cf.
In the MIT KfW build based on commit 0415c85, if a ticket is already
issued, clicking the *"Get Ticket"* button fails to obtain a new one. You
need to either *"Destroy Ticket"* first and then *"Get Ticket"* again, or
use *"Renew Ticket"* instead.
In the official mit kfw 4.1, clicking *"Get Ticket"* would overwrite the
existing ticket even if one was already issued.
I suspect that PR #218 <https://github.com/krb5/krb5/pull/218> might have
influenced this behavior, but I haven’t fully confirmed it yet.
2025년 10월 30일 (목) 오후 1:55, Everyday Engineering <eubnara@gmail.com>님이 작성:
> Hello, this is the first time to send an email to krb5-bugs. I hope this
> is the right way.
>
> I use mit kfw 4.1 on windows 11.
> I can renew kerberos ticket which is stored at "MSLSA:".
> However, I cannot renew the ticket which is stored at "FILE:".
> I can renew it with the command "kinit -R".
>
> Of course, automatic renewal also doesn't work.
>
> It is hard for me to find the cause from the kfw source codes.
>
> Could I get some any help?
>
> Regards.
>
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
