One of the credential cache types offered by MIT Kerberos is
MEMORY. According to the documentation it is used by kadmin.
MEMORY caches are for storage of credentials that don’t need to be made available outside of the current process. For example, a memory ccache is used by kadmin to store the administrative ticket used to contact the admin server.
I have tried setting
default_ccache_name = MEMORY: in
/etc/krb5.conf. After doing so I made a packet capture while issuing the
kinit command. From this capture I can see that a TGT was successfully obtained from the KDC. This ticket was then (obviously) lost as soon as the kinit process finished. Furthermore, it seems if persistent memory based tickets are required one can use the
KEYRING ccache type.
What are the other use cases of the MEMORY credential cache type?
I assume this is not useful from a bash script for example. When the script calls
kinit it will fork and upon completion the obtained ticket will not be accessible to the parent.
Is there perhaps a kerberos header file that can be included so as to keep obtained tickets in the same address space as the rest of your logic?