[2637] in Athena Bugs

home help back first fref pref prev next nref lref last post

Kerberos clients & ticket lifetimes

daemon@ATHENA.MIT.EDU (John Carr)
Tue Jul 25 04:09:58 1989

To: bugs@ATHENA.MIT.EDU
Date: Tue, 25 Jul 89 04:09:41 EDT
From: John Carr <jfc@ATHENA.MIT.EDU>

Even if I request a TGT with > 8 hour lifetime, Kerberos clients
only ask for tickets with an 8 hour lifetime:

% klist
Ticket file:    /tmp/tkt_ttyv0
Principal:      jfc@ATHENA.MIT.EDU

  Issued           Expires          Principal
Jul 24 19:51:12  Jul 25 17:06:12  krbtgt.ATHENA.MIT.EDU@ATHENA.MIT.EDU
Jul 24 19:51:25  Jul 25 03:51:25  rvdsrv.cyrus@ATHENA.MIT.EDU
Jul 24 19:51:26  Jul 25 03:51:26  rvdsrv.eurydice@ATHENA.MIT.EDU
Jul 24 19:51:26  Jul 25 03:51:26  rvdsrv.priam@ATHENA.MIT.EDU
Jul 24 19:51:31  Jul 25 17:06:31  afs.athena.mit.edu@ATHENA.MIT.EDU
Jul 24 19:51:40  Jul 25 03:51:40  olc.matisse@ATHENA.MIT.EDU
Jul 24 19:53:13  Jul 25 03:53:13  zephyr.zephyr@ATHENA.MIT.EDU
Jul 24 19:53:41  Jul 25 03:53:41  pop.e40-po@ATHENA.MIT.EDU
Jul 24 20:23:25  Jul 25 04:23:25  discuss.charon@ATHENA.MIT.EDU
Jul 24 20:23:28  Jul 25 04:23:28  discuss.menelaus@ATHENA.MIT.EDU
Jul 24 20:23:29  Jul 25 04:23:29  discuss.bloom-beacon@ATHENA.MIT.EDU
Jul 24 20:23:32  Jul 25 04:23:32  discuss.matisse@ATHENA.MIT.EDU
Jul 24 20:23:33  Jul 25 04:23:33  discuss.achilles@ATHENA.MIT.EDU
Jul 24 20:23:43  Jul 25 04:23:43  discuss.picasso@ATHENA.MIT.EDU
Jul 24 21:01:12  Jul 25 05:01:12  rvdsrv.minos@ATHENA.MIT.EDU
Jul 24 21:42:53  Jul 25 05:42:53  rcmd.paris@ATHENA.MIT.EDU
Jul 25 00:23:49  Jul 25 08:23:49  rvdsrv.venus@ATHENA.MIT.EDU
Jul 25 00:29:06  Jul 25 08:29:06  rvdsrv.sol@ATHENA.MIT.EDU
Jul 25 00:30:13  Jul 25 08:30:13  rcmd.beeblebrox@ATHENA.MIT.EDU
Jul 25 00:39:02  Jul 25 08:39:02  rvdsrv.aeneas@ATHENA.MIT.EDU
Jul 25 00:40:48  Jul 25 08:40:48  rvdsrv.themis@ATHENA.MIT.EDU
Jul 25 02:40:28  Jul 25 10:40:28  sms.sms@ATHENA.MIT.EDU

This forces me to re-kinit to use the services, even though I have a
valid TGT.  The exception to this is aklog, which does the right thing
(gets a service ticket valid as long as the TGT).


  --John Carr

home help back first fref pref prev next nref lref last post