Credential cache searching, ccapi and file caches
hartmans at MIT.EDU
Thu Jul 15 16:15:53 EDT 2004
>>>>> "Matt" == Matt Crawford <crawdad at fnal.gov> writes:
Matt> A side comment, which may amount to a request:
Matt> I recall old behavior in MIT Kerberos on Unix that if a
Matt> needed service ticket was expired, the client would error
Matt> out even if the TGT was still valid. This could happen if
Matt> the maxlife for a service's principal were short. Since
Matt> setting a shorter maxlife for some services (or even all
Matt> services) could be useful, I'm hoping this behavior either
Matt> has been or will be modified.
Fixed in 1.3.
More information about the krbdev