Bastian Blank <[EMAIL PROTECTED]> writes:

> Package: krb5-user
> Version: 1.6.dfsg.3-2
> Severity: wishlist
>
> klist currently is not able to show tickets as expired. Also the output
> is rather unreadable.
>
> Example with expired tickets:
> | Valid starting     Expires            Service principal
> | 05/22/08 19:46:44  05/23/08 05:46:44  krbtgt/[EMAIL PROTECTED]
> |         renew until 05/23/08 19:46:42
> | 05/22/08 19:46:47  05/23/08 05:46:44  host/$HOST@
> |         renew until 05/23/08 19:46:42
> | 05/22/08 19:46:47  05/23/08 05:46:44  host/[EMAIL PROTECTED]
> |         renew until 05/23/08 19:46:42
>
> The heimdal klist shows that as
> |   Issued           Expires        Principal
> | May 22 18:24:41  >>>Expired<<<  krbtgt/[EMAIL PROTECTED]
> | May 22 18:26:56  >>>Expired<<<  host/$HOST@
> | May 22 18:26:56  >>>Expired<<<  host/[EMAIL PROTECTED]

That does lose information, but I agree that it would be a good idea to
not show that by default and make people use a flag if they want to see
exactly when an expired ticket has expired.  I'll report this upstream.

> Also showing the "renew until" line for not renewable tickets makes not
> much sense (and just makes the output more unreadable). Heimdal omits
> them always.

So does MIT if you really don't have renewable tickets.

windlord:~> klist
Ticket cache: FILE:/tmp/krb5cc_1000_EFwuh23588
Default principal: [EMAIL PROTECTED]

Valid starting     Expires            Service principal
05/23/08 06:02:18  05/24/08 06:02:08  krbtgt/[EMAIL PROTECTED]
05/23/08 06:02:19  05/24/08 06:02:08  afs/[EMAIL PROTECTED]

You have something different -- you have renewable tickets where the
renewable lifetime is the same as the regular ticket lifetime.  If you've
tried with the same ticket cache with both implementations, my guess is
that Heimdal is also suppressing the renewable lifetime in that case
(which is another case where I could see people being unhappy at losing
that information, even if you normally don't care).

-- 
Russ Allbery ([EMAIL PROTECTED])               <http://www.eyrie.org/~eagle/>



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to