klist shows same ticket multiple times

Greg Hudson ghudson at MIT.EDU
Tue Jun 24 01:00:35 EDT 2014


On 06/19/2014 01:25 PM, Ben H wrote:
> However I am also seeing in some scenarios what appears to be the exact
> same tickets (based on SPN, time, flags, and encryption type) listed
> multiple times in my cache.

This can happen when several processes all try to contact a service
within a short time window using the same cache.  Each process checks
the cache for a service ticket, doesn't find it, gets a service ticket
from the KDC, then adds the resulting ticket to the cache.  Since the
FILE ccache is append-only, all of the tickets land in the cache.  It's
not usually a problem, although in extreme cases it can cause
performance issues.


More information about the Kerberos mailing list