3

I have noticed a couple of messages about my Kerberos credentials expiring.

What does this actually mean and what will happen when they expire?

How do I renew them? Is it just a case of logging in again?

-bash-3.00$

        Message from [email protected] [ 28 August 2009 01:58:53 BST ] ...

Message to [email protected]:

your kerberos credentials expire in less than 30 minutes.

<EOT>

1 Answer 1

4

You originally authenticated to the Kerberos Key Distribution Centre (KDC) and were given a ticket-granting ticket (TGT). You used this TGT to get a ticket for your telnet session (from the KDC): the TGT and this ticket are separate things.

The TGT is about to expire. If you want to use it to get any more tickets after this, then you will need to re-authenticate yourself (i.e. obtain a new TGT).

The ticket you currently have for your open telnet session is still valid however, and is unaffected by the TGT expiring.

4
  • Ahh good I was worried that my session containing a long running process would stop working but now you have enlightened me about the TGTs it makes sense. Thanks
    – pjp
    Aug 28, 2009 at 7:29
  • "for your open telnet session"? Does anybody still use telnet? Aug 28, 2009 at 8:36
  • @grawity I still use telnet for some testing :-P
    – Jeremy L
    Aug 28, 2009 at 11:06
  • Kerberized telnet uses encryption and so isn't really the same issue as old telnet.
    – chris
    Aug 28, 2009 at 12:37

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .