X-CACHECONF in cache type 0504

Greg Hudson ghudson at MIT.EDU
Thu Nov 18 13:18:40 EST 2010


On Thu, 2010-11-18 at 13:07 -0500, Frank Cusack wrote:
> I find it interesting that kinit puts this info in the ccache and
> kinit -R removes it.

That's an implementation imperfection, but it's not terribly important
just yet.  The config entry is used to determine whether the KDC has
FAST support, and is currently only used when the caller supplies an
armor ccache to krb5_get_init_creds.  We don't really expect people to
use renewed credentials as armor ccaches.

When we implement client-side FAST TGS support it will probably become
relevant.





More information about the krbdev mailing list