-allow_tgs_req
Chris Hecker
checker at d6.com
Mon Jan 8 23:24:59 EST 2018
Ah, I assumed that was symmetric for some reason. I obviously need to be
able to get tickets for these services. Not sure why I thought that. I'll
check it out, thanks!
Chris
On Mon, Jan 8, 2018 at 20:15 Russ Allbery <eagle at eyrie.org> wrote:
> Chris Hecker <checker at d6.com> writes:
>
> > Ah. Is there any way to prevent a service princ from being able to get
> > tickets?
>
> > As in, if one of my service keytabs is compromised, can I prevent those
> > princs from being used like a normal user princ?
>
> I think you want -allow_tix.
>
> --
> Russ Allbery (eagle at eyrie.org) <http://www.eyrie.org/~eagle/>
>
More information about the Kerberos
mailing list