Bastian Blank <[EMAIL PROTECTED]> writes: > Package: krb5-user > Version: 1.6.dfsg.3-2 > Severity: wishlist > > klist currently is not able to show tickets as expired. Also the output > is rather unreadable. > > Example with expired tickets: > | Valid starting Expires Service principal > | 05/22/08 19:46:44 05/23/08 05:46:44 krbtgt/[EMAIL PROTECTED] > | renew until 05/23/08 19:46:42 > | 05/22/08 19:46:47 05/23/08 05:46:44 host/$HOST@ > | renew until 05/23/08 19:46:42 > | 05/22/08 19:46:47 05/23/08 05:46:44 host/[EMAIL PROTECTED] > | renew until 05/23/08 19:46:42 > > The heimdal klist shows that as > | Issued Expires Principal > | May 22 18:24:41 >>>Expired<<< krbtgt/[EMAIL PROTECTED] > | May 22 18:26:56 >>>Expired<<< host/$HOST@ > | May 22 18:26:56 >>>Expired<<< host/[EMAIL PROTECTED]
That does lose information, but I agree that it would be a good idea to not show that by default and make people use a flag if they want to see exactly when an expired ticket has expired. I'll report this upstream. > Also showing the "renew until" line for not renewable tickets makes not > much sense (and just makes the output more unreadable). Heimdal omits > them always. So does MIT if you really don't have renewable tickets. windlord:~> klist Ticket cache: FILE:/tmp/krb5cc_1000_EFwuh23588 Default principal: [EMAIL PROTECTED] Valid starting Expires Service principal 05/23/08 06:02:18 05/24/08 06:02:08 krbtgt/[EMAIL PROTECTED] 05/23/08 06:02:19 05/24/08 06:02:08 afs/[EMAIL PROTECTED] You have something different -- you have renewable tickets where the renewable lifetime is the same as the regular ticket lifetime. If you've tried with the same ticket cache with both implementations, my guess is that Heimdal is also suppressing the renewable lifetime in that case (which is another case where I could see people being unhappy at losing that information, even if you normally don't care). -- Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

