X-CACHECONF in cache type 0504

Tim Alsop Tim at cybersafe.com
Fri Nov 19 11:50:44 EST 2010

Ok, thanks.

Next I am going to capture data between MIT 1.8.1 kinit and MS AD, to find
out why this cache entry is being written, when KDC does not support FAST


On 19/11/2010 16:43, "Greg Hudson" <ghudson at mit.edu> wrote:

>On Fri, 2010-11-19 at 11:27 -0500, Tim Alsop wrote:
>> Ok, so we can use krb5_ccache_conf_data at the start with the
>> as realm, but the data between these two elements can be anything we
>> e.g. This is valid and acceptable if found in a cache:
>> krb5_ccache_conf_data/foo/bar/hello/world at X-CACHECONF:
>Well, any service principal is valid and acceptable according to the
>cache format.
>To work with the Heimdal/MIT krb5_cc_get_config API, the principal must
>have three components: "krb5_ccache_conf_data", the config key, and the
>unparsed name of the cache's default client principal.

More information about the krbdev mailing list