TGT ticket for SSH login

Dennis Davis D.H.Davis at
Fri Nov 2 05:36:46 EDT 2012

On Wed, 31 Oct 2012, Oliver Loch wrote:

> From: Oliver Loch <grimeton at>
> To: Jim Shi <hanmao_shi at>
> Cc: kerberos at
> Date: Wed, 31 Oct 2012 19:47:17
> Subject: Re: TGT ticket for SSH login
> The ssh client uses the active ticket from your ticket cache.
> See kswitch. If the user of the ticket is "foo" and the system
> user is "bar", ssh tries to logon as "bar" with "foo"'s service
> ticket.

Note the kswitch command is only available in the krb5-1.10.x
releases.  This command won't be available if you're running a
version of kerberos earlier than this.  Typically RedHat6 comes with
an earlier version of kerberos.
Dennis Davis, BUCS, University of Bath, Bath, BA2 7AY, UK
D.H.Davis at               Phone: +44 1225 386101

More information about the Kerberos mailing list