On Mon, 2008-11-03 at 05:42 -0800, Peter Eriksson wrote: > > What version of Solaris are you running? > > Solaris 10 Update 5 with all the latest patches. > > > > Is ktkt_warnd(1M) enabled (svcs ktkt_warn)? > > ktkt_warn will renew your TGT automatically for you > > up to its max renewable lifetime (see the > > "renew until" field from klist(1) output). > > Yep. > > Hmm.. I wonder if this might be happening when the > 'renew until' time limit runs out. When it happened this > time I had been logged in since 28:th of October. > > algorah:~> last peter | egrep dtlocal > peter dtlocal :3 Tue Oct 28 20:38 still logged in > > > algorah:~> klist > Ticket cache: FILE:/tmp/krb5cc_103 > Default principal: peter at IFM.LIU.SE > > Valid starting Expires Service principal > 03/11/2008 08:41 03/11/2008 16:41 krbtgt/IFM.LIU.SE at IFM.LIU.SE > renew until 10/11/2008 08:41
Looks like you can still renew your ticket. ktkt_warnd should be renewing your ticket for you before it expires... Do you see any warnings from ktkt_warnd? By default it will display them on the terminal. You can change this behaviour by editing /etc/krb5/warn.conf. -M
