Checking renewability of TGT programatically

Russ Allbery rra at
Thu May 2 13:34:51 EDT 2013

Greg Hudson <ghudson at MIT.EDU> writes:
> On 05/02/2013 09:51 AM, Arpit Srivastava wrote:

>> I am using GSS API with Kerberos as underlying implementation. I am
>> fetching a TGT from AD, and I need to check whether the ticket is is
>> renewable or not either preferably using some GSS API method (or some
>> native method).

> If possible, I would suggest using the k5start program:


In particular, the krenew program, included in that distribution, does
something very similar to what you want to do.  Even if it's not a perfect
match, you could probably reuse quite a bit of code.

Russ Allbery (rra at             <>

More information about the krbdev mailing list