Credential cache searching, ccapi and file caches

Sam Hartman hartmans at MIT.EDU
Thu Jul 15 16:15:53 EDT 2004

>>>>> "Matt" == Matt Crawford <crawdad at> writes:

    Matt> A side comment, which may amount to a request:

    Matt> I recall old behavior in MIT Kerberos on Unix that if a
    Matt> needed service ticket was expired, the client would error
    Matt> out even if the TGT was still valid.  This could happen if
    Matt> the maxlife for a service's principal were short. Since
    Matt> setting a shorter maxlife for some services (or even all
    Matt> services) could be useful, I'm hoping this behavior either
    Matt> has been or will be modified.

Fixed in 1.3.

More information about the krbdev mailing list