Can I automatically cache AD tickets into a file on windows?

[Mauro Cazzari]

One more thing: if MIT Kerberos is installed, is there a way to populate the KRB5CCNAME cache file automatically when I log on to Windows without having to use a keytab or having to run a kinit under the covers?

From: Todd Grayson [mailto:tgrayson at cloudera.com]
Sent: Friday, November 18, 2016 11:34 AM
To: Mauro Cazzari <Mauro.Cazzari at sas.com>
Cc: Kerberos at mit.edu
Subject: Re: Can I automatically cache AD tickets into a file on windows?

From what I understand, the windows SSPI implementation does not provide a facility to hold the credentials in a file.  You would use the MIT KFW to be able to do that.

On Friday, November 18, 2016, Mauro Cazzari <Mauro.Cazzari at sas.com<mailto:Mauro.Cazzari at sas.com>> wrote:
Kerberos experts,
Is there a way to automatically cache AD-generated tickets to the file provided through the KRB5CCNAME environment variable on Windows without having to run a kinit? My understanding is that Windows caches tickets in memory (whereas Unix does the same on file). Do I need to install MIT Kerberos, or (ideally) can I just use the copy of Kerberos that comes with Windows to achieve my goal?
Thanks!
Mauro.
________________________________________________
Kerberos mailing list           Kerberos at mit.edu<javascript:;>
https://mailman.mit.edu/mailman/listinfo/kerberos


--
Todd Grayson
Business Operations Manager
Customer Operations Engineering
Security SME
[http://files.cloudera.com.s3.amazonaws.com/New%20Branding/cloudera-small.png]