0.9rc1 Comment #4

["Henry B. Hotz" <hotz@jpl.nasa.gov>]

kadmin will use an existing tgt from the ccache, but won't use an  
existing kadmin/admin service ticket.  I note that using the tgt at  
all is new behavior since 0.7.x.

$ /usr/local/heimdal/sbin/kadmin -p hotz/admin
kadmin> privs
list, get
kadmin> exit
$ /usr/local/heimdal/sbin/kadmin -p hotz/admin
kadmin> privs
list, get
kadmin> exit
$ /usr/local/heimdal/sbin/kadmin -p hotz/admin
kadmin> privs
list, get
kadmin> exit
HotzBook:/usr/local/dist/mit/krb5-1.6/doc hotz$ klist
Kerberos 5 ticket cache: 'API:Initial default ccache'
Default principal: hotz@JPL.NASA.GOV

Valid Starting     Expires            Service Principal
06/27/07 17:59:49  06/28/07 03:59:41  krbtgt/JPL.NASA.GOV@JPL.NASA.GOV
         renew until 07/04/07 17:59:41
06/27/07 18:00:03  06/28/07 03:59:41  kadmin/admin@JPL.NASA.GOV
06/27/07 18:00:12  06/28/07 03:59:41  kadmin/admin@JPL.NASA.GOV
06/27/07 18:00:25  06/28/07 03:59:41  kadmin/admin@JPL.NASA.GOV

klist: No Kerberos 4 tickets in credentials cache
HotzBook:/usr/local/dist/mit/krb5-1.6/doc hotz$

As before, this is 0.9rc1 client with 0.7.2 kadmind.

------------------------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu