kstart 3.12 released

Russ Allbery rra at stanford.edu
Wed Apr 23 18:18:28 EDT 2008

I'm pleased to announce release 3.12 of kstart.

k4start, k5start, and krenew are modified versions of kinit which add
support for running as a daemon to maintain a ticket cache, running a
command with credentials from a keytab and maintaining a ticket cache
until that command completes, obtaining AFS tokens (via an external
aklog) after obtaining tickets, and creating an AFS PAG for a command.
They are primarily useful in conjunction with long-running jobs; for
moving ticket handling code out of servers, cron jobs, or daemons; and
to obtain tickets and AFS tokens with a single command.

Changes from previous release:

    krenew, when running a command, first copies the current ticket cache
    to a private cache for that command so that it will be unaffected by
    later destruction of the cache (such as by user logout).  The private
    cache is deleted when the command exits.

    Fix problems with command-line parsing in k4start and k5start that
    led to treating a provided command as a principal in some situations.
    Allow for getopt() implementations that don't strip the -- argument
    if it occurs after the first non-option (such as on at least older

    k5start now uses krb5_cc_destroy() rather than unlink to clean up the
    ticket cache when necessary.

    Fix multiple problems with the libkafs and AFS system call checks
    on platforms other than Linux that caused the libraries to leak into
    the global LIBS and include checks done without the AFS include

    Fix the ordering of LDFLAGS to avoid accidentally linking with the
    AFS com_err library and ensure the AFS syscall layer is built with
    the right CPPFLAGS.

    If KRB5_CONFIG was explicitly set in the environment, don't use a
    different krb5-config based on --with-krb4 or --with-krb5.  If
    krb5-config isn't executable, don't use it.  This allows one to
    force library probing by setting KRB5_CONFIG to point to a
    nonexistent file.

    Sanity-check the results of krb5-config before proceeding and error
    out in configure if they don't work.

    Fix Autoconf syntax error when probing for libkrb5support.  Thanks,
    Mike Garrison.

You can download it from:


Debian packages have been uploaded to Debian unstable.

Please let me know of any problems or feature requests not already listed
in the TODO file.

Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>

More information about the Kerberos mailing list