Weird behavior on ticket renewal

[Ben Creech]

I'm trying to write a little code to renew everything in the krb5 ccache. 
Should it be possible to renew SGT's, or should I just get renew the TGT 
and get new SGT's?

When I try to do the former, I get the error below.  kinit -R (for just the 
TGT) works fine.  Am I getting this error because I shouldn't be trying to 
renew an SGT, or because something is broken at my site?

$ kinit -4 -5 -A -r 48:00
Password for bpcreech at EOS.NCSU.EDU:
$ aklog eos unity bp
$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: bpcreech at EOS.NCSU.EDU

Valid starting     Expires            Service principal
06/02/03 15:50:04  06/03/03 01:52:44  krbtgt/EOS.NCSU.EDU at EOS.NCSU.EDU
        renew until 06/04/03 15:52:44
06/02/03 15:50:18  06/03/03 01:52:44  afs/eos.ncsu.edu at EOS.NCSU.EDU
        renew until 06/04/03 15:52:44
06/02/03 15:50:23  06/03/03 01:52:44  afs/unity.ncsu.edu at EOS.NCSU.EDU
        renew until 06/04/03 15:52:44
06/02/03 15:50:24  06/03/03 01:52:44  afs/bp.ncsu.edu at EOS.NCSU.EDU
        renew until 06/04/03 15:52:44


Kerberos 4 ticket cache: /tmp/tkt1000
Principal: bpcreech at EOS.NCSU.EDU

  Issued              Expires             Principal
06/02/03 15:50:04  06/03/03 01:50:04  krbtgt.EOS.NCSU.EDU at EOS.NCSU.EDU
$ kinit -R -S afs/eos.ncsu.edu at EOS.NCSU.EDU
kinit(v5): Requested server and ticket don't match while renewing 
credentials
$ kinit -R -S afs/unity.ncsu.edu at EOS.NCSU.EDU
kinit(v5): Requested server and ticket don't match while renewing 
credentials
$

Thanks,
Ben Creech
NCSU ITECS