[2637] in Athena Bugs
Kerberos clients & ticket lifetimes
daemon@ATHENA.MIT.EDU (John Carr)
Tue Jul 25 04:09:58 1989
To: bugs@ATHENA.MIT.EDU
Date: Tue, 25 Jul 89 04:09:41 EDT
From: John Carr <jfc@ATHENA.MIT.EDU>
Even if I request a TGT with > 8 hour lifetime, Kerberos clients
only ask for tickets with an 8 hour lifetime:
% klist
Ticket file: /tmp/tkt_ttyv0
Principal: jfc@ATHENA.MIT.EDU
Issued Expires Principal
Jul 24 19:51:12 Jul 25 17:06:12 krbtgt.ATHENA.MIT.EDU@ATHENA.MIT.EDU
Jul 24 19:51:25 Jul 25 03:51:25 rvdsrv.cyrus@ATHENA.MIT.EDU
Jul 24 19:51:26 Jul 25 03:51:26 rvdsrv.eurydice@ATHENA.MIT.EDU
Jul 24 19:51:26 Jul 25 03:51:26 rvdsrv.priam@ATHENA.MIT.EDU
Jul 24 19:51:31 Jul 25 17:06:31 afs.athena.mit.edu@ATHENA.MIT.EDU
Jul 24 19:51:40 Jul 25 03:51:40 olc.matisse@ATHENA.MIT.EDU
Jul 24 19:53:13 Jul 25 03:53:13 zephyr.zephyr@ATHENA.MIT.EDU
Jul 24 19:53:41 Jul 25 03:53:41 pop.e40-po@ATHENA.MIT.EDU
Jul 24 20:23:25 Jul 25 04:23:25 discuss.charon@ATHENA.MIT.EDU
Jul 24 20:23:28 Jul 25 04:23:28 discuss.menelaus@ATHENA.MIT.EDU
Jul 24 20:23:29 Jul 25 04:23:29 discuss.bloom-beacon@ATHENA.MIT.EDU
Jul 24 20:23:32 Jul 25 04:23:32 discuss.matisse@ATHENA.MIT.EDU
Jul 24 20:23:33 Jul 25 04:23:33 discuss.achilles@ATHENA.MIT.EDU
Jul 24 20:23:43 Jul 25 04:23:43 discuss.picasso@ATHENA.MIT.EDU
Jul 24 21:01:12 Jul 25 05:01:12 rvdsrv.minos@ATHENA.MIT.EDU
Jul 24 21:42:53 Jul 25 05:42:53 rcmd.paris@ATHENA.MIT.EDU
Jul 25 00:23:49 Jul 25 08:23:49 rvdsrv.venus@ATHENA.MIT.EDU
Jul 25 00:29:06 Jul 25 08:29:06 rvdsrv.sol@ATHENA.MIT.EDU
Jul 25 00:30:13 Jul 25 08:30:13 rcmd.beeblebrox@ATHENA.MIT.EDU
Jul 25 00:39:02 Jul 25 08:39:02 rvdsrv.aeneas@ATHENA.MIT.EDU
Jul 25 00:40:48 Jul 25 08:40:48 rvdsrv.themis@ATHENA.MIT.EDU
Jul 25 02:40:28 Jul 25 10:40:28 sms.sms@ATHENA.MIT.EDU
This forces me to re-kinit to use the services, even though I have a
valid TGT. The exception to this is aklog, which does the right thing
(gets a service ticket valid as long as the TGT).
--John Carr