[1645] in Athena Bugs
Re: parsing of kerberos ticket files
daemon@ATHENA.MIT.EDU (John T Kohl)
Fri Jan 13 14:12:07 1989
Date: Fri, 13 Jan 89 14:11:41 EST
From: John T Kohl <jtkohl@ATHENA.MIT.EDU>
To: tjcoppet@ATHENA.MIT.EDU
Cc: bugs@ATHENA.MIT.EDU, kerberos-bugs@ATHENA.MIT.EDU
In-Reply-To: Your message of Thu, 08 Dec 88 21:28:44 EST, <8812090228.AA05693@PICASSO.MIT.EDU>
If, in my ticket file, I have a ticket for a service which has expired,
and immediately after it, I have a valid ticket for the same service,
mk_ap_req() tells me that my ticket has expired. It would be nice if the
function continued searching for a valid ticket.
The problem you describe should happen only if the ticket in
question is your ticket-granting ticket. Any other ticket in the ticket
file will be used and turned into a ticket/authenticator pair without
complaint by krb_mk_req().
The code change required would be to manually run through the ticket
cache to find all instances of a ticket name, and try them until they
get results. Conceptually, the ticket cache really should have only one
of each 'type' of ticket, and coding to allow more than one of the same
ticket is not really clean.
John
