Storing TGT in cache

Matt matt.smith at uconn.edu
Tue Apr 20 12:02:13 EDT 2004


Hmmm.... this is quite an interesting thought for me.  It would be very 
useful for an applet to function as a "kinit" to a number of realms, 
which would then store a TGT within my Win2k/Apple/Linux local cache, 
such that my local applications and utilities can connect to Kerberized 
resources (file shares, spnego-web, etc)    Of course, the need for 
multiple OS's means this would need to be a standard part of the JVM (or 
separate OS aware Java packages).

Does such a beast exist?

-Matt

Richard Gundersen wrote:
> Hi
> 
> After logging in successfully using the Krb5LoginModule that comes with 
> JDK1.4 I get a TGT that's either come from the cache, or has been 
> created from fresh by the KDC. This ticket hangs around in memory so I 
> can use it until it expires.
> 
> But if I close my Browser/application etc, that TGT is lost because it 
> has not been persisted in the cache. The only way I can see of storing a 
> ticket in the cache is by using kinit, but I don't want to do this 
> because it means two calls to the KDC - once to get the 'transient' 
> ticket and then once again when I call kinit.
> 
> I thought there would be some method on KerberosTicket called 
> storeInTicketCache() or something but can't find anything like it.
> 
> Has anyone else had this and found a solution?
> 
> Thanks for your help
> 
> _________________________________________________________________
> Express yourself with cool new emoticons 
> http://www.msn.co.uk/specials/myemo
> 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 


More information about the Kerberos mailing list