TGT Flags

Philippe Perrin philippeperrin at yahoo.com
Wed Feb 27 11:51:46 EST 2002


Thank you for your krb5.conf hint. It works well with the text console login
(which uses /usr/local/sbin/login.krb5).
But the graphical authentication (using the PAM module) still has this
problem : the TGT flags do not contain "F". Do you know how to configure it
?

Thank you

Philippe

"Marc Horowitz" <marc at mit.edu> a écrit dans le message de news:
t53g03n1f8i.fsf at horowitz-m1.mit.edu...
> "Philippe Perrin" <philippeperrin at yahoo.com> writes:
>
> >> Can anyone tell me
> >> 1) what this "A" flag means ?
>
> It means the client used preauthentication to get the ticket.
>
> >> 2) what I have to configure to have the "F" (forwardable) flag on my
TGT ?
>
> Add to krb5.conf:
>
> [libdefaults]
>         forwardable = true
>
>                 Marc





More information about the Kerberos mailing list