Tickets Longer Than Wanted?

John Hascall john at iastate.edu
Fri Jan 4 17:47:16 EST 2008


> >>>>> "John" == John Hascall <john at iastate.edu> writes:
> John> Given the following code snippet:
> 
>                 krb5_creds rq;
>                 time_t now = time(NULL);
>                 memset(&rq, 0, sizeof(rq));
>                 rq.times.starttime = now;
>                 rq.times.endtime = now + 1024;
>                 rq.client = iasc->sc_k5_me;
>                 rq.server = server;
>                 k5_err = krb5_get_in_tkt_with_keytab(iasc->sc_k5_context, 0,
>                                                      NULL, NULL, NULL,
>                                                      iasc-sc_k5_keytab,
>                                                      NULL, &rq, NULL);
> 
> John> Why am I getting tickets with a 1 day (86400 second) lifetime?
> John> (I was trying to test with a short lifetime to see if some
> John> ticket-renewing code was working correctly and waiting a day
> John> to do each test is hopeless).
> 
> The krb5_get_in_tkt functions are deprecated; please use
> krb5_get_init_creds functions instead.

    That seems to work.

>                                         Also, what release are you
> running?  ... bug in krb5-1.3 ...
> If you are seeing this behavior with a recent release, we would
> appreciate hearing more details.

    1.6.3

Thanks,
John
PS, Is there going to be an upto date API document at some point?



More information about the Kerberos mailing list