Ticket forwarding failure

Thomas A. La Porte tlaporte at anim.dreamworks.com
Mon May 22 17:12:24 EDT 2006


You're not doing anything wrong: there is no need for the 
host/noodle.foo.com at JBTEST and afs/jbtest at JBTEST tickets to be 
forwarded. With the ticket-granting ticket "krbtgt/JBTEST at JBTEST" 
in FILE:/tmp/krb5cc_p11616 you will be able to obtain service 
tickets for "host/noodle.foo.com" and "afs/jbtest", should you 
require them.

  -- Tom

Thomas A. La Porte, DreamWorks Animation
<mailto:tlaporte at anim.dreamworks.com>

On Mon, 22 May 2006, Jeff Blaine wrote:

> *NOW* what am I doing wrong? :)  Why are my other
> tickets not being forwarded?  MIT Kerberos 1.4.3
> telnet and telnetd in use.
>
> jblaine > klist -f
> Ticket cache: FILE:/tmp/krb5cc_p11561
> Default principal: jblaine at JBTEST
>
> Valid starting     Expires            Service principal
> 05/22/06 15:20:08  05/23/06 01:20:08  krbtgt/JBTEST at JBTEST
>         renew until 05/22/06 15:20:08, Flags: FRI
> 05/22/06 15:22:03  05/23/06 01:20:08  host/noodle.foo.com at JBTEST
>         renew until 05/22/06 15:20:08, Flags: FRT
> 05/22/06 15:22:20  05/23/06 01:20:08  afs/jbtest at JBTEST
>         renew until 05/22/06 15:20:08, Flags: FRT
>
>
> Kerberos 4 ticket cache: /tmp/tkt26560
> klist: You have no tickets cached
>
> jblaine > telnet -a -F 192.168.168.3
> Trying 192.168.168.3...
> Connected to noodle.foo.com (192.168.168.3).
> Escape character is '^]'.
> [ Kerberos V5 accepts you as ``jblaine at JBTEST'' ]
> [ Kerberos V5 accepted forwarded credentials ]
> Last login: Mon May 22 15:22:03 from noodle
> Sun Microsystems Inc.   SunOS 5.9       Generic May 2002
> jblaine > klist -f
> Ticket cache: FILE:/tmp/krb5cc_p11616
> Default principal: jblaine at JBTEST
>
> Valid starting     Expires            Service principal
> 05/22/06 15:22:28  05/23/06 01:20:08  krbtgt/JBTEST at JBTEST
>         renew until 05/22/06 15:20:08, Flags: FfRT
>
>
> Kerberos 4 ticket cache: /tmp/tkt26560
> klist: You have no tickets cached
> jblaine >
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>



More information about the Kerberos mailing list