Checking renewability of TGT programatically

[Russ Allbery]

Greg Hudson <ghudson at MIT.EDU> writes:
> On 05/02/2013 09:51 AM, Arpit Srivastava wrote:

>> I am using GSS API with Kerberos as underlying implementation. I am
>> fetching a TGT from AD, and I need to check whether the ticket is is
>> renewable or not either preferably using some GSS API method (or some
>> native method).

> If possible, I would suggest using the k5start program:

>   http://www.eyrie.org/~eagle/software/kstart/k5start.html

In particular, the krenew program, included in that distribution, does
something very similar to what you want to do.  Even if it's not a perfect
match, you could probably reuse quite a bit of code.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>