On Wed, 31 Oct 2012, Oliver Loch wrote: > From: Oliver Loch <grime...@gmx.net> > To: Jim Shi <hanmao_...@apple.com> > Cc: kerberos@mit.edu > Date: Wed, 31 Oct 2012 19:47:17 > Subject: Re: TGT ticket for SSH login > > The ssh client uses the active ticket from your ticket cache. > > See kswitch. If the user of the ticket is "foo" and the system > user is "bar", ssh tries to logon as "bar" with "foo"'s service > ticket.
Note the kswitch command is only available in the krb5-1.10.x releases. This command won't be available if you're running a version of kerberos earlier than this. Typically RedHat6 comes with an earlier version of kerberos. -- Dennis Davis, BUCS, University of Bath, Bath, BA2 7AY, UK d.h.da...@bath.ac.uk Phone: +44 1225 386101 ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos