Question about TGT forwarding

[Benjamin Kaduk]

On Wed, Jun 06, 2018 at 05:08:19PM -0400, Jason Edgecombe wrote:
> 
> Running "klist" when logged on to Windows 10 with my domain account shows
> the following flags for my krbtgt/DOMAIN entry:
> 
> Ticket Flags 0x60a10000 -> forwardable forwarded renewable pre_authent
> name_canonicalize

That's the windows-native klist binary -- it might be interesting to
see the KfW klist output, which you can get if you run it with the
full path (e.g., C:\Program Files\MIT\Kerberos\bin\klist.exe IIRC)

-Ben