[16476] in Kerberos_V5_Development
Re: X-CACHECONF in cache type 0504
daemon@ATHENA.MIT.EDU (Greg Hudson)
Thu Nov 18 15:02:51 2010
From: Greg Hudson <ghudson@mit.edu>
To: Tim Alsop <Tim@cybersafe.com>
In-Reply-To: <C90B3149.2772E%Tim.Alsop@CyberSafe.com>
Date: Thu, 18 Nov 2010 15:02:47 -0500
Message-ID: <1290110567.2633.1225.camel@ray>
Mime-Version: 1.0
Cc: "krbdev@MIT.EDU" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Thu, 2010-11-18 at 14:41 -0500, Tim Alsop wrote:
> Can you try with 1.8.1 kinit with MS AD 2003 domain, and then use
> something like:
[...]
> It will be good to know if you get the same result.
equal-rites$ /me/inst18/bin/kinit ghudson@WIN.MIT.EDU
Password for ghudson@WIN.MIT.EDU:
equal-rites$ strings /tmp/krb5cc_3622_KoPBVu6523 | grep X-CACHE
equal-rites$ /me/inst16/bin/klist -5
Ticket cache: FILE:/tmp/krb5cc_3622_KoPBVu6523
Default principal: ghudson@WIN.MIT.EDU
Valid starting Expires Service principal
11/18/10 14:56:26 11/19/10 00:56:28 krbtgt/WIN.MIT.EDU@WIN.MIT.EDU
renew until 11/19/10 00:56:26
equal-rites$
By contrast, with trunk MIT code against a trunk MIT KDC which does
support FAST:
equal-rites$ kinit user
Password for user@KRBTEST.COM:
equal-rites$ strings testdir/ccache | grep X-CACHE
X-CACHECONF:
equal-rites$ /me/inst16/bin/klist -5
Ticket cache: FILE:/me/krb5/build/testdir/ccache
Default principal: user@KRBTEST.COM
Valid starting Expires Service principal
11/18/10 15:00:15 11/19/10 15:00:15 krbtgt/KRBTEST.COM@KRBTEST.COM
12/31/69 19:00:00 12/31/69 19:00:00 krb5_ccache_conf_data/fast_avail/krbtgt\/KRBTEST.COM\@KRBTEST.COM@X-CACHECONF:
equal-rites$
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
