[krbdev.mit.edu #1199] Local host login results in host ticket that expires in 5 minutes

[Ken Hornstein]

>It seems to me a bigger problem that the code doesn't deal with
>service tickets with shorter lifetime than the TGT.

I've never figured out what the "right" thing is here, since every
other time I've seen a service ticket with a shorter lifetime than
the TGT it's been a realm misconfiguration or cross-realm with
different lifetimes in different realms.  In those two cases,
getting a new ticket from the KDC wouldn't help.  Just my $0.02.

--Ken