[WinPartners] Kerberos tickets never expire (?)

[Stephen Dowdy]

This is a new behavior with Leash32 v 2.6.0.20040720.

While I may get some of the details wrong... it goes something like:

The way Microsoft implements Kerberos is that the tickets will 
automatically renew themselves for 30 days.  This way, in the pure 
Microsoft world, a user won't get ugly error messages if they try to 
sign-off the machine when their tickets had expired causing the profile not 
to be written back or for things like Word and/or Excel where user 
preferences are kept, the user won't get ugly messages.

With the latest release of leash32... if you open leash32 and close 
leash32, you will notice that a little dog head is still on the system tray 
on the PC even thought you closed Leash32.  This new version of Leash32 
automatically renews the tickets when they expire similarly to the 
Microsoft behavior.

If you open up leash from the little dog head on the system tray and open 
up your K5 tickets, for example, you will see the time the ticket was 
issued, the time the ticket will expire, and the time the ticket will 
continue to renew.  For my tickets, currently, they will continue to renew 
until August 19th.  I haven't tested by leaving my machine on to see what 
happens on August 19th.  But for now, my tickets will continue to renew 
themselves for a week.

Or something like that :)

At 12:44 PM 8/12/2004 -0400, Eduardo Gonzalez wrote:
>I do see those options that you're talking about, but I never changed it 
>from the default (default ticket lifetime 10 hours). Its gotta be some 
>sort of bug. This didn't happen with Kerberos 2.5. Its not a huge deal to 
>me at all.. since my computer just locks itself automatically when the 
>screen saver comes on, but its not supposed to work this way.
>
>I'll keep on providing feedback to either the Help Desk or to the Kerberos 
>team, if there is such a thing.
>
>Eduardo
>
>At 11:24 AM 8/11/2004, Paul Dzus wrote:
> >I found that when you initialize tickets via the Leash32 interface, 
> there's options for Ticket Lifetime (maximum of 1 day) but there's 
> options for getting tickets that renew (with a maximum of 30 
> days!).  Maybe that renewal is happening automatically?
> >
> >I had not enabled that option but left my ticket lifetime at the default 
> 10 hours.
> >
> >Paul K. Dzus
> >Network and Information Technology Manager
> >The MIT Press (NE25-4007)
> >Five Cambridge Center, Suite 4
> >Cambridge, MA 02142-1493  USA
> >Telephone       (617) 258-6783
> >FAX             (617) 258-6779
> >e-mail: pdzus at mit.edu
> >URL:            http://mitpress.mit.edu/
> >
> >
> >
> >
> >At 10:57 AM 8/11/2004, Eduardo Gonzalez wrote:
> >>Dear Computing Help Desk,
> >>
> >>Is it my machine or has anyone seen this? Ever since installing the new 
> version of Kerberos (version 2.6.3; Windows XP Pro), my tickets 
> apparently never expire. For example, when I come back from the weekend 
> my tickets are still valid and when I open Eudora my email just 
> downloads! It happens every morning. Should I be surprised by this..? I 
> don't remember reading anything in the release notes as to this change in 
> behavior, and I'm concerned for obvious reasons. I haven't looked at its 
> settings because I wanted to run this by you first.
> >>
> >>Eduardo
> >>
> >>_______________________________________________
> >>winpartners mailing list
> >>winpartners at mit.edu
> >>http://mailman.mit.edu/mailman/listinfo/winpartners
>
>- - -
>
>_______________________________________________
>winpartners mailing list
>winpartners at mit.edu
>http://mailman.mit.edu/mailman/listinfo/winpartners