ticket renew

Tom Yu tlyu at MIT.EDU
Wed Apr 29 14:57:33 EDT 2009


"Xu, Qiang (FXSGSC)" <Qiang.Xu at fujixerox.com> writes:

> Hi, all: 
>
> I have done a kerberos authentication successfully, and get a TGT. And I also can use the TGT to do SASL binding in LDAP query now. 
>
> The ticket looks like: 
> ===========================================
> MBC107:/var/log/nc <135> /tmp/dlms/kerberos/apps/klist   
> Ticket cache: FILE:/tmp/krb5cc_0
> Default principal: xuan at SESSWIN2003.COM
>
> Valid starting     Expires            Service principal
> 04/23/09 15:14:53  04/24/09 01:13:50  krbtgt/SESSWIN2003.COM at SESSWIN2003.COM
>         renew until 04/24/09 15:14:53
> 04/23/09 15:13:50  04/24/09 01:13:50  ldap/sesswin2003.sesswin2003.com at SESSWIN2003.COM
>         renew until 04/24/09 15:14:53
> ===========================================
> It said the ticket is renewable until somewhen. But how to do it in code? Is there any function to use, to renew the ticket?

kinit -R

can renew a renewable ticket.  Are you asking if there is an API for
renewing tickets?



More information about the Kerberos mailing list