Ronny Blomme wrote:
> I don't understand: what is the difference between the tickets I get
> after logging in with ssh, and those I get with "kinit --renewable"?

Compare them by using 'klist -f'.

What are the differences between the tickets?

> They both are renewable since they have the R-flag. But the first (ssh)
> one is only renewable once, the second one (kinit --renewable) are
> renewable several times with "kinit -R". Can somebody explain this?
> And how should I modify my configuration to allow several "kinit -R"
> after login without giving my password?

A ticket is only renewable if it is not expired and if the renew
lifetime has not been reached.

Jeffrey Altman

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to