kcpytkt to copy a service ticket for client principal not matching the default principal

Greg Hudson ghudson at mit.edu
Mon Jun 15 18:47:42 EDT 2020

On 6/15/20 5:28 PM, Josef Petermann wrote:
> How can we get kcpytkt to match a credential not matching the default principal? Ideally, the solution would involve supplying the client principal as an additional command line argument to kcpytkt.

We don't build or install kcpytkt except on Windows.

I have been thinking of adding some options from Heimdal's kgetcred to
kvno, including --out-ccache, which initializes a ccache and stores the
retrieved credential into it.  Would that be adequate here?

More information about the krbdev mailing list