Need help: How to use different caches for TGT and TGS.

Santosh Kumar santoshjeergi at gmail.com
Thu Dec 13 00:00:37 EST 2018


HI everyone,

seeking your help for below:

Have default TGT in default cache location /tmp/krb5cc_36073 .

How to get TGS and store in different cache , but use TGT from default
cache location?
Like in heimdal has ./kgetcred -c /tmp/krb5cc_36073
--out-cache=/tmp/imper_cache --impersonate=user at EXAMPLE.NET
delegateusr at EXAMPLE.NET

where in kvno.c  can i modify to request different cache location for TGS.


In below all the tickets are in same location:

santoshkj$ ./klist -a -f
Ticket cache: FILE:/tmp/krb5cc_36073
Default principal: host/PXE-DEV.EXAMPLE.NET at EXAMPLE.NET

Valid starting     Expires            Service principal
12/11/18 16:40:20  12/12/18 02:40:20  krbtgt/EXAMPLE.NET at EXAMPLE.NET
        renew until 12/18/18 16:40:20, Flags: FRIA
        Addresses: (none)
12/11/18 16:41:01  12/12/18 02:40:20  host/PXE-DEV.EXAMPLE.NET at EXAMPLE.NET
        for client leema\@EXAMPLE.NET at EXAMPLE.NET, renew until 12/18/18
16:40:20, Flags: FRA
        Addresses: (none)
12/11/18 16:41:02  12/12/18 02:40:20  http/
Parent-2K16.EXAMPLE.NET at EXAMPLE.NET
        for client leema\@EXAMPLE.NET at EXAMPLE.NET, renew until 12/18/18
16:40:20, Flags: FRA
        Addresses: (none)

Thanks
Santosh


More information about the Kerberos mailing list