[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

renewing a forwardable ticket


when renewing a forwardable ticket using kinit(1) the forwardable flag
seems to be stripped unless I explicitly request it to be set using
kinit's `-f' option:

$ klist -v
Ticket flags: forwardable, renewable, initial, pre-authenticated
$ kinit -R
$ klist -v
Ticket flags: renewable, pre-authenticated, transited-policy-checked

My krb5.conf contains `forwardable = true' in the `libdefaults' section.

Is this a bug or a feature? I would have expected a forwardable ticket
to be still forwardable after being renewed, by default...

TIA, Jukka

bashian roulette:
$ ((RANDOM%6)) || rm -rf ~