>When we use kinit to get the service ticket for a host, then it will not >send TGS_REQ but sends AS_REQ to the KDC. > > >$ ./kinit -S [EMAIL PROTECTED] >Password for [EMAIL PROTECTED]:
Yes, that's correct. It's supposed to. Note that I suspect you're misunderstanding the use of the -S flag ... it's usually used for those rare cases when you want to get a service ticket for a service that has been explicitly disabled from being gotten by a TGS_REQ (like kadmin/admin, for example). If you're trying to test Kerberos, you should try an application like Kerberos telnet/rlogin/ftp; those will use TGS_REQ to acquire service tickets without prompting for a password. --Ken ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos
