Idle Timeout

Russ Allbery rra at
Tue Jan 4 12:54:38 EST 2011

Brian Candler <B.Candler at> writes:

> Kerberos is a single sign-on system. You get your TGT at the start of
> the day, and then it logs you in automatically and transparently to each
> service you visit.

> If you want the site to prompt for username/password, either initially
> or after an idle timeout, then I think it will need to do its own HTTP
> Basic authentication.

Or you can use a web authentication system based on or capable of using
Kerberos, like:

which offer various additional features, such as this sort of idle
timeout.  Kerberos by itself is not going to provide this.

Russ Allbery (rra at             <>

More information about the Kerberos mailing list