Bastian Blank <[EMAIL PROTECTED]> writes:

> The question is, should klist provide a quick overview or all
> information? I think it should provide a quick overview. And for this it
> should output the really important things, and the expired state is such
> information. If you want all informations about the tickets you ask for
> it with an option. Just check heimdal klist -v.

Well, sort of.  MIT klist does already provide a short overview; if you
want to see all information it knows how to display, try klist -efa.  They
do differ on what that means specifically in the case of expired tickets
(and I like the formatting of Heimdal's klist -v better).

> Yeah, saw later that MIT always request renewable tickets, even if only
> one day.

It doesn't always do so, but I've seen the behavior that you've seen
before and I'm not sure what the difference is.  When I authenticate with
the default Debian krb5.conf against the stanford.edu realm, I don't get
renewable tickets (even though renewable tickets are supported), but I do
see this with our test realm, which is running the same versions of all of
the software.  kdc.conf looks the same, as do the relevant principal
settings.  Hm.

-- 
Russ Allbery ([EMAIL PROTECTED])               <http://www.eyrie.org/~eagle/>



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to