Question on validating Kerberos Ticket (From one machine to another)

first last swtest9 at yahoo.com
Mon Jun 25 16:23:25 EDT 2007


I have a situtation that doesn't seem to be covered by MIT Kerberos API, at least not obivious to me.  I am new as well to Kerberos and authentication in general.

I have a client system, both linux and windows that has a valid ticket (TGT) in its cache.  I take that ASN.1 encoded ticket and move it to another machine which then wants to know if the client machine has an authorized user.  What I want to do is to validate that ticket.  Is there anything that would return authorized, expired, invalid, etc. when I present the ticket to the KDC?

Or is there any way to take that ASN.1 encoded ticket (client machine) and stick it into the cache (on the other machine) and then use that to perform the TGS exchange (on the other machine)?

Thanks,
John
       
---------------------------------
Get the Yahoo! toolbar and be alerted to new email wherever you're surfing. 


More information about the krbdev mailing list