renewing a forwardable ticket

[Jukka Salmi]

Hi,

when renewing a forwardable ticket using kinit(1) the forwardable flag
seems to be stripped unless I explicitly request it to be set using
kinit's `-f' option:

$ klist -v
[...]
Ticket flags: forwardable, renewable, initial, pre-authenticated
[...]
$ kinit -R
$ klist -v
[...]
Ticket flags: renewable, pre-authenticated, transited-policy-checked
[...]

My krb5.conf contains `forwardable = true' in the `libdefaults' section.

Is this a bug or a feature? I would have expected a forwardable ticket
to be still forwardable after being renewed, by default...


TIA, Jukka

-- 
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~