krb5 ticket cache

Donn Cave donn at
Wed Feb 5 12:46:09 EST 2003

Quoth kerberos at (Klaas Hagemann):
| after doing kinit the kerberos client creates a krb5 ticket cache file 
| like /tmp/krb5cc_506.
| Another user having root privileges on this client can optain these 
| ticket cache file and have the network wide rights of the owner of this 
| ticket.
| Is there any chance that the ticket is stored in memory rather than on 
| the local disk? can i configure it in any way?

Yes!  Try this:

  Password for me at there.where:

Now look for your credentials in /tmp, and they won't be there.  They
won't be anywhere else either, they're just gone, along with the kinit
process that owned that storage, but that would be what you wanted.

	Donn Cave, donn at

More information about the Kerberos mailing list