[26919] in Athena Bugs
9.4.26 solaris: krb4 ticket expiry is way too long
daemon@ATHENA.MIT.EDU (John Hawkinson)
Tue Aug 15 10:39:00 2006
Date: Tue, 15 Aug 2006 10:38:49 -0400 (EDT)
Message-Id: <200608151438.k7FEcn9u026028@multics.mit.edu>
To: bugs@mit.edu
From: John Hawkinson <jhawk@mit.edu>
X-Spam-Score: 1.217
X-Spam-Level: * (1.217)
X-Spam-Flag: NO
Errors-To: bugs-bounces@mit.edu
If I request a krb5 ticket with a non-default lifetime of
1 day, I end up with a krb4 ticket that expires in
about a month.
I don't know if this is kinit or the server or what that
is misbehaving [perhaps both?].
--jhawk
[multics!jhawk:x] ~> kdestroy
kdestroy: No credentials cache found while destroying cache
[multics!jhawk:x] ~> klist
klist: No credentials cache found (ticket cache FILE:/tmp/krb5cc_p631x)
Kerberos 4 ticket cache: /tmp/tkt_p631x
klist: You have no tickets cached
[multics!jhawk:x] ~> kinit -l1d sipbtest
Password for sipbtest@ATHENA.MIT.EDU:
[multics!jhawk:x] ~> klist
Ticket cache: FILE:/tmp/krb5cc_p631x
Default principal: sipbtest@ATHENA.MIT.EDU
Valid starting Expires Service principal
08/15/06 10:33:52 08/16/06 07:48:52 krbtgt/ATHENA.MIT.EDU@ATHENA.MIT.EDU
renew until 08/16/06 10:33:52
Kerberos 4 ticket cache: /tmp/tkt_p631x
Principal: sipbtest@ATHENA.MIT.EDU
Issued Expires Principal
08/15/06 10:33:53 09/14/06 10:33:53 krbtgt.ATHENA.MIT.EDU@ATHENA.MIT.EDU
