[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference smurf::buildhelp

Title:USG buildhelp questions/answers
Moderator:SMURF::FILTER
Created:Mon Apr 26 1993
Last Modified:Mon Jan 20 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:2763
Total number of notes:5802

1498.0. "klist information" by AOSG::FILTER (Automatic Posting Software - mail to flume::puck) Wed May 31 1995 19:12

Date Of Receipt: 	31-MAY-1995 14:14:51.62
From: 	SMURF::FLUME::"demers@yokwe.zk3.dec.com" "31-May-1995 1412"
To: 	odehelp@yokwe.zk3.dec.com
CC: 	
Subj: 	klist information

Hi,

The following is a typical display from the klist command from my 
workstation:

Ticket file:	/var/dss/kerberos/tkt/tkt1909
Principal:	Joyce_Demers@ZONE

  Issued           Expires          Principal
May 31 09:11:02  May 31 19:11:02  krbtgt.ZONE@ZONE
May 31 09:11:46  May 31 17:11:46  kxct.ronyon@ZONE


I understand that the ticket was issued to me at 9:11:46 a.m. and that 
it will expire at 17:11:46; this information is on the second line.

Does "kxct.ronyon@ZONE" indicate that my Kerberos ticket was issued from 
ronyon, my ODE server?

Also, what does the first line indicate?

						Joyce

T.RTitleUserPersonal
Name
DateLines
1498.1Re: klist informationAOSG::FILTERAutomatic Posting Software - mail to flume::puckWed May 31 1995 20:1717
Date Of Receipt: 	31-MAY-1995 15:22:29.76
From: 	SMURF::FLUME::"jmf@yokwe.zk3.dec.com"
To: 	demers@yokwe.zk3.dec.com, odehelp@yokwe.zk3.dec.com
CC: 	
Subj: 	Re:  klist information
The first line: 	
May 31 09: 	11:02  May 31 19:11:02  krbtgt.ZONE@ZONE

is your "ticket-granting-ticket" - you actually get a ticket with authorizes
you to get a ticket.  Don't ask me why!  kinit gives you the first line
only.  If you had no ticket and did kinit then klist, you'd see just the
first line; after your first ode operation authorized with server ronyon you
will see the second line.  If you then did an operation with server buffer,
for eg, you'd get a 3rd line and so on...

-josh

1498.2Re: klist informationAOSG::FILTERAutomatic Posting Software - mail to flume::puckWed May 31 1995 21:3555
Date Of Receipt: 	31-MAY-1995 16:48:32.58
From: 	SMURF::FLUME::"demers@yokwe.zk3.dec.com" "31-May-1995 1646"
To: 	odehelp@yokwe.zk3.dec.com
CC: 	
Subj: 	Re:  klist information

Bear with me... I'm a little confused.

Why does the first line, the "ticket-granting-ticket" line, indicate a 
10 hour time period, while the second line:

	May 31 09:11:46  May 31 17:11:46  kxct.ronyon@ZONE

indicates an 8 hour time period?

(This is very difficult to describe for a novice user.)

						Joyce

------- Forwarded Message

Return-Path: jmf@yokwe.zk3.dec.com 
Delivery-Date: Wed, 31 May 95 15:21:10 -0400
Return-Path: jmf@yokwe.zk3.dec.com
Received: from yokwe.zk3.dec.com by flume.zk3.dec.com; 
(5.65v3.0/1.1.8.2/16Jan95-0946AM)
	id AA10642; Wed, 31 May 1995 15:21:04 -0400
Received: by yokwe.zk3.dec.com (5.65/DEC-Ultrix/4.3)
	id AA10954; Wed, 31 May 1995 15:20:16 -0400
Received: by flume.zk3.dec.com; (5.65v3.0/1.1.8.2/16Jan95-0946AM)
	id AA10643; Wed, 31 May 1995 15:21:03 -0400
Date: Wed, 31 May 1995 15:21:03 -0400
From: Joshua M. Friedman OSF/UNIX SDE <jmf@yokwe.zk3.dec.com>
Message-Id: <9505311921.AA10643@flume.zk3.dec.com>
To: demers@yokwe.zk3.dec.com, odehelp@yokwe.zk3.dec.com
Subject: Re:  klist information

The first line:
May 31 09:11:02  May 31 19:11:02  krbtgt.ZONE@ZONE

is your "ticket-granting-ticket" - you actually get a ticket with 
authorizes
you to get a ticket.  Don't ask me why!  kinit gives you the first line
only.  If you had no ticket and did kinit then klist, you'd see just the
first line; after your first ode operation authorized with server ronyon 
you
will see the second line.  If you then did an operation with server 
buffer,
for eg, you'd get a 3rd line and so on...

- -josh

------- End of Forwarded Message


1498.3Re: klist informationAOSG::FILTERAutomatic Posting Software - mail to flume::puckThu Jun 01 1995 17:3484
Date Of Receipt: 	 1-JUN-1995 13:10:06.92
From: 	SMURF::FLUME::jmf "Joshua M. Friedman OSF/UNIX SDE"
To: 	demers@yokwe.zk3.dec.com
CC: 	odehelp@DEC:.zko.flume
Subj: 	Re:  klist information

The kinit command takes an option -l to get a length of time up to
21 hours or so (in units of 5 minutes).  I thought the default was
always 8 hours; maybe this changed, or perhaps a kinit was done with
-l (not likely).  At any rate, this determines the tgt ticket length;
the "real" ticket is gotten automatically and always is 8 hours.

Any more detail will have to come from DECwest if you still have
questions; that's about the limit of my kerberos knowledge.

-josh

>From demers@yokwe.zk3.dec.com  Wed May 31 16:46:59 1995
Delivery-Date: Wed, 31 May 95 16:47:37 -0400
Return-Path: demers@yokwe.zk3.dec.com
Received: from yokwe.zk3.dec.com by flume.zk3.dec.com; (5.65v3.0/1.1.8.2/16Jan95-0946AM)
	id AA21280; Wed, 31 May 1995 16:46:59 -0400
Received: by yokwe.zk3.dec.com (5.65/DEC-Ultrix/4.3)
	id AA11130; Wed, 31 May 1995 16:46:09 -0400
Message-Id: <9505312046.AA11130@yokwe.zk3.dec.com>
To: odehelp@yokwe.zk3.dec.com
Subject: Re:  klist information 
Date: Wed, 31 May 95 16:46:03 -0400
From: demers@yokwe.zk3.dec.com
X-Mts: smtp
Status: R

Bear with me... I'm a little confused.

Why does the first line, the "ticket-granting-ticket" line, indicate a 
10 hour time period, while the second line:

	May 31 09:11:46  May 31 17:11:46  kxct.ronyon@ZONE

indicates an 8 hour time period?

(This is very difficult to describe for a novice user.)

						Joyce

------- Forwarded Message

Return-Path: jmf@yokwe.zk3.dec.com 
Delivery-Date: Wed, 31 May 95 15:21:10 -0400
Return-Path: jmf@yokwe.zk3.dec.com
Received: from yokwe.zk3.dec.com by flume.zk3.dec.com; 
(5.65v3.0/1.1.8.2/16Jan95-0946AM)
	id AA10642; Wed, 31 May 1995 15:21:04 -0400
Received: by yokwe.zk3.dec.com (5.65/DEC-Ultrix/4.3)
	id AA10954; Wed, 31 May 1995 15:20:16 -0400
Received: by flume.zk3.dec.com; (5.65v3.0/1.1.8.2/16Jan95-0946AM)
	id AA10643; Wed, 31 May 1995 15:21:03 -0400
Date: Wed, 31 May 1995 15:21:03 -0400
From: Joshua M. Friedman OSF/UNIX SDE <jmf@yokwe.zk3.dec.com>
Message-Id: <9505311921.AA10643@flume.zk3.dec.com>
To: demers@yokwe.zk3.dec.com, odehelp@yokwe.zk3.dec.com
Subject: Re:  klist information

The first line:
May 31 09:11:02  May 31 19:11:02  krbtgt.ZONE@ZONE

is your "ticket-granting-ticket" - you actually get a ticket with 
authorizes
you to get a ticket.  Don't ask me why!  kinit gives you the first line
only.  If you had no ticket and did kinit then klist, you'd see just the
first line; after your first ode operation authorized with server ronyon 
you
will see the second line.  If you then did an operation with server 
buffer,
for eg, you'd get a 3rd line and so on...

- -josh

------- End of Forwarded Message