multiple principals in one cache?

Ken Hornstein kenh at cmf.nrl.navy.mil
Mon Nov 15 13:59:32 EST 2010


>For example, if I'm logged in with tickets as ghudson at ATHENA.MIT.EDU and
>I ksu to root by entering the password for ghudson/root at ATHENA.MIT.EDU,
>I wind up with a new ccache containing all of my old tickets (for client
>principal ghudson) plus a TGT and host service ticket for client
>principal ghudson/root.

Hm.  Fair enough.  Dumb question: why does it do that?  I mean, as we've
discussed on this thread nearly all applications can't utilitize such a
ccache.

--Ken



More information about the Kerberos mailing list