Ticket forwarding failure

Ken Hornstein kenh at cmf.nrl.navy.mil
Mon May 22 22:25:18 EDT 2006


>*NOW* what am I doing wrong? :)  Why are my other
>tickets not being forwarded?  MIT Kerberos 1.4.3
>telnet and telnetd in use.

You're not doing anything wrong; that's how it's supposed to work.
Only the TGT gets forwarded; since you can use the TGT to get any ticket
you want, this isn't a problem.  And just in case you're wondering ...
no, there's effectively no way to change this (in theory, you can
forward any ticket you want; in practice, no application protocol
that I've ever seen supports this).

--Ken



More information about the Kerberos mailing list