TGT ticket for SSH login

[Dennis Davis]

On Wed, 31 Oct 2012, Oliver Loch wrote:

> From: Oliver Loch <grimeton at gmx.net>
> To: Jim Shi <hanmao_shi at apple.com>
> Cc: kerberos at mit.edu
> Date: Wed, 31 Oct 2012 19:47:17
> Subject: Re: TGT ticket for SSH login
> 
> The ssh client uses the active ticket from your ticket cache.
>
> See kswitch. If the user of the ticket is "foo" and the system
> user is "bar", ssh tries to logon as "bar" with "foo"'s service
> ticket.

Note the kswitch command is only available in the krb5-1.10.x
releases.  This command won't be available if you're running a
version of kerberos earlier than this.  Typically RedHat6 comes with
an earlier version of kerberos.
-- 
Dennis Davis, BUCS, University of Bath, Bath, BA2 7AY, UK
D.H.Davis at bath.ac.uk               Phone: +44 1225 386101