Question about TGT forwarding

Benjamin Kaduk kaduk at mit.edu
Wed Jun 6 17:29:12 EDT 2018


On Wed, Jun 06, 2018 at 05:08:19PM -0400, Jason Edgecombe wrote:
> 
> Running "klist" when logged on to Windows 10 with my domain account shows
> the following flags for my krbtgt/DOMAIN entry:
> 
> Ticket Flags 0x60a10000 -> forwardable forwarded renewable pre_authent
> name_canonicalize

That's the windows-native klist binary -- it might be interesting to
see the KfW klist output, which you can get if you run it with the
full path (e.g., C:\Program Files\MIT\Kerberos\bin\klist.exe IIRC)

-Ben


More information about the Kerberos mailing list