Strange KDC behaviour about renewable tickets
Vladimir Terziev
vladimir.terziev at sun-fish.com
Fri Mar 7 05:30:33 EST 2003
Hi all,
I have a MIT Kerberos 5 KDC configured with the following options for our realm:
max_life = 15m 0s
max_renewable_life = 1h 0m 0s
When I do ``kinit -r 1h'', ``klist -f'' I see the following:
Valid starting Expires Service principal
03/07/03 12:12:32 03/07/03 12:27:32 krbtgt/REALM at REALM
renew until 03/07/03 12:27:32, Flags: RI
After 6 min I do ``kinit -R'', ``klist -f'' I the following is very sgtrange for me:
Valid starting Expires Service principal
03/07/03 12:18:26 03/07/03 12:27:32 krbtgt/REALM at REALM
renew until 03/07/03 12:27:32, Flags: RIT
Klist shows changed starting time, but the expiration time is the same.
Does anybody have an idea about this behaviour of KDC? Is this a bug in KDC or I do someting wrong?
regards,
Vladimir
More information about the Kerberos
mailing list