Strange KDC behaviour about renewable tickets

Vladimir Terziev vladimir.terziev at sun-fish.com
Fri Mar 7 05:30:33 EST 2003


	Hi all,

	I have a MIT Kerberos 5 KDC configured with the following options for our realm:

	max_life = 15m 0s
	max_renewable_life = 1h 0m 0s

	When I do ``kinit -r 1h'', ``klist -f'' I see the following:

	Valid starting     Expires            Service principal
        03/07/03 12:12:32  03/07/03 12:27:32  krbtgt/REALM at REALM
        renew until 03/07/03 12:27:32, Flags: RI

	After 6 min I do ``kinit -R'', ``klist -f'' I the following is very sgtrange for me:

        Valid starting     Expires            Service principal
        03/07/03 12:18:26  03/07/03 12:27:32  krbtgt/REALM at REALM
        renew until 03/07/03 12:27:32, Flags: RIT

	Klist shows changed starting time, but the expiration time is the same.

	Does anybody have an idea about this behaviour of KDC? Is this a bug in KDC or I do someting wrong?

	regards,

		Vladimir



More information about the Kerberos mailing list