Checking renewability of TGT programatically
rra at stanford.edu
Thu May 2 13:34:51 EDT 2013
Greg Hudson <ghudson at MIT.EDU> writes:
> On 05/02/2013 09:51 AM, Arpit Srivastava wrote:
>> I am using GSS API with Kerberos as underlying implementation. I am
>> fetching a TGT from AD, and I need to check whether the ticket is is
>> renewable or not either preferably using some GSS API method (or some
>> native method).
> If possible, I would suggest using the k5start program:
In particular, the krenew program, included in that distribution, does
something very similar to what you want to do. Even if it's not a perfect
match, you could probably reuse quite a bit of code.
Russ Allbery (rra at stanford.edu) <http://www.eyrie.org/~eagle/>
More information about the krbdev