AW: Example for kinit -S ... ?

[Barbat, Calin]

Hello Luke,

Ok. Suppose, I have two services (SAP R/3 instances) which call each other by kerberized RFC (remote function call).
Does every service need then a ticket for the other one, possibly in the own keytab?

Then I would do something like: kinit -k -t /etc/krb5.keytab <name1>/<domain>@<REALM> -S <name2>/<domain>@<REALM>
and the keytab would need to contain both entries if I understand it well. Or?

Thanks, 

Calin.

-----Ursprüngliche Nachricht-----
Von: Luke Howard [mailto:lukeh at padl.com]
Gesendet: Montag, 17. Januar 2005 15:15
An: Barbat, Calin
Cc: kerberos at mit.edu
Betreff: Re: Example for kinit -S ... ?

>can somebody explain to me when to issue kinit with -S <service>?
>Perhaps with an example, preferably applied to a GSS-API-application.
>
>My command so far: kinit -k -t /etc/krb5.keytab <name>/<domain>@<REALM>

When you want a ticket to the specified service rather than a ticket
granting ticket.

-- Luke

--