Hi all,

When we use kinit to get the service ticket for a host, then it will not
send TGS_REQ but sends AS_REQ to the KDC.


$ ./kinit -S [EMAIL PROTECTED]
Password for [EMAIL PROTECTED]:
$

On the KDC log,
Mar 29 03:42:02 sonhp3 krb5kdc[5479](info): AS_REQ X.X.X.X(88): ISSUE:
authtime
1017373322, [EMAIL PROTECTED] for
[EMAIL PROTECTED]

That is it sending the AS_REQ instead of TGS_REQ.  Why it is asking for
password? Why it can't read the credential cache and acquire user and get
the service on the user's behalf?

$ ./klist
Ticket cache: FILE:/tmp/krb5cc_1020
Default principal: [EMAIL PROTECTED]

Valid starting     Expires            Service principal
03/29/02 03:42:02  03/29/02 13:40:49
[EMAIL PROTECTED]

$

In the credential cache you will have only the service ticket? What happened
to the TGT?

Thanks in Advance.
Srini


*********************************************************************
Disclaimer: The information in this e-mail and any attachments is
confidential / privileged. It is intended solely for the addressee or
addressees. If you are not the addressee indicated in this message, you may
not copy or deliver this message to anyone. In such case, you should destroy
this message and kindly notify the sender by reply email. Please advise
immediately if you or your employer does not consent to Internet email for
messages of this kind.
*********************************************************************
________________________________________________
Kerberos mailing list           [EMAIL PROTECTED]
http://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to