Kerberos for Windows 2.6.5 ccname FILE: issues

[Hughes, Noah L [ECSS]]

Jeffrey,

You are right, kdestroy.exe works with the FILE:c:\temp\krbcache.  The
reason I had trouble was that the destroy function in Leash32 locked the
file and went into the 99% CPU usage. 

The kdestroy.exe error was from Leash32 locking the file.

It appears that Leash32 is the program that has problems with destorying
the FILE:c:\temp\krbcache ticket.


-----Original Message-----
From:	kerberos-bounces at MIT.EDU on behalf of Jeffrey Altman
Sent:	Fri 7/15/2005 4:44 PM
To:	kerberos at MIT.EDU
Cc:	
Subject:	Re: Kerberos for Windows 2.6.5 ccname FILE: issues
Noah:

Can you provide any additional information that might be used to
replicate the problem?

I'm using Windows XP SP2:

[C:\src\openafs\openafs-cvs\src\WINNT\afsd]set
KRB5CCNAME=FILE:c:\temp\krbcache

[C:\src\openafs\openafs-cvs\src\WINNT\afsd]kinit jaltman at ATHENA.MIT.EDU
Password for jaltman at ATHENA.MIT.EDU:

[C:\src\openafs\openafs-cvs\src\WINNT\afsd]kvno
afs/athena.mit.edu at ATHENA.MIT.EDU
afs/athena.mit.edu at ATHENA.MIT.EDU: kvno = 3

[C:\src\openafs\openafs-cvs\src\WINNT\afsd]klist
Ticket cache: FILE:c:\temp\krbcache
Default principal: jaltman at ATHENA.MIT.EDU

Valid starting     Expires            Service principal
07/15/05 17:42:38  07/16/05 03:42:39
krbtgt/ATHENA.MIT.EDU at ATHENA.MIT.EDU
07/15/05 17:42:55  07/16/05 03:42:39  afs/athena.mit.edu at ATHENA.MIT.EDU


Kerberos 4 ticket cache: API:krb4cc
Principal: jaltman at ATHENA.MIT.EDU

  Issued              Expires             Principal
07/15/05 17:37:39  07/16/05 03:42:39
krbtgt.ATHENA.MIT.EDU at ATHENA.MIT.EDU

[C:\src\openafs\openafs-cvs\src\WINNT\afsd]kdestroy

[C:\src\openafs\openafs-cvs\src\WINNT\afsd]klist
klist.exe: No credentials cache found (ticket cache
FILE:c:\temp\krbcache)


Kerberos 4 ticket cache: API:krb4cc
klist.exe: No ticket file (tf_util)

Jeffrey Altman


Noah Hughes wrote:

> I have found these problems when running Kerberos for Windows 2.6.5:
> 
> When I use the environment variable %KRB5CCNAME% and set it to
> "FILE:c:\temp\krbcache" without the quotes it works fine.  Leash is
> able to create and renew, but uses 100% CPU time when I try to destroy
> the ticket.
> 
> Also kdestoy.exe does not destroy the ticket and also fails giving an
> error message
> 
> "kdestroy: No credentials cache found while destroying cache"
> 
> When I use the registry key 
> "HKEY_LOCAL_MACHINE\SOFTWARE\MIT\kerberos5,cnname" to
> "FILE:c:\temp\krbcache"
> 
> Again Leash is able to create and renew, but it uses 100% CPU when you
> try to destroy the ticket.  However, kdestroy is able to destory the
> ticket using this method.
> 
> Is there any way to get Leash to destory this ticket when using the
> FILE:c:\temp\krbcache?
> 
> Thanks
> 
> Noah Hughes
> 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 

-- 
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu
________________________________________________
Kerberos mailing list           Kerberos at mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos