-allow_tgs_req

Russ Allbery eagle at eyrie.org
Mon Jan 8 23:15:41 EST 2018


Chris Hecker <checker at d6.com> writes:

> Ah.  Is there any way to prevent a service princ from being able to get
> tickets?

> As in, if one of my service keytabs is compromised, can I prevent those
> princs from being used like a normal user princ?

I think you want -allow_tix.

-- 
Russ Allbery (eagle at eyrie.org)              <http://www.eyrie.org/~eagle/>


More information about the Kerberos mailing list