kcpytkt to copy a service ticket for client principal not matching the default principal

[Greg Hudson]

On 6/15/20 5:28 PM, Josef Petermann wrote:
> How can we get kcpytkt to match a credential not matching the default principal? Ideally, the solution would involve supplying the client principal as an additional command line argument to kcpytkt.

We don't build or install kcpytkt except on Windows.

I have been thinking of adding some options from Heimdal's kgetcred to
kvno, including --out-ccache, which initializes a ccache and stores the
retrieved credential into it.  Would that be adequate here?