On 02/25/2012 07:53 AM, Marco Pizzoli wrote:
Hi, as you know I'm working with FreeIPA 2.1.90.

By following documentation I checked my tickets by issuing the klist
command but I'm obtaining an output slightly different than the one on
the doc.

[root@freeipa01 ~]# klist -kt /etc/krb5.keytab
Keytab name: WRFILE:/etc/krb5.keytab
KVNO Timestamp         Principal
---- -----------------
--------------------------------------------------------
    2 02/15/12 18:28:58 host/freeipa01.unix.mydomain...@unix.mydomain.it
<mailto:freeipa01.unix.mydomain...@unix.mydomain.it>
    2 02/15/12 18:28:58 host/freeipa01.unix.mydomain...@unix.mydomain.it
<mailto:freeipa01.unix.mydomain...@unix.mydomain.it>
    2 02/15/12 18:28:58 host/freeipa01.unix.mydomain...@unix.mydomain.it
<mailto:freeipa01.unix.mydomain...@unix.mydomain.it>
    2 02/15/12 18:28:58 host/freeipa01.unix.mydomain...@unix.mydomain.it
<mailto:freeipa01.unix.mydomain...@unix.mydomain.it>
    2 02/15/12 18:28:58 host/freeipa01.unix.mydomain...@unix.mydomain.it
<mailto:freeipa01.unix.mydomain...@unix.mydomain.it>
    2 02/15/12 18:28:58 host/freeipa01.unix.mydomain...@unix.mydomain.it
<mailto:freeipa01.unix.mydomain...@unix.mydomain.it>

I see 6 rows as duplicated. Is it normal? Please, could you explain what
is happening?

I believe that is due to the new s4u2proxy kerberos implmentation, I've seen it too while testing with s4u2proxy. Unfortunately I cannot explain it either and would love for one of our Kerberos gurus to provide an explanation.

John


--
John Dennis <jden...@redhat.com>

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to