On Fri, May 23, 2008 at 06:20:05AM -0700, Russ Allbery wrote:
> Bastian Blank <[EMAIL PROTECTED]> writes:
> > The heimdal klist shows that as
> > | Issued Expires Principal
> > | May 22 18:24:41 >>>Expired<<< krbtgt/[EMAIL PROTECTED]
> > | May 22 18:26:56 >>>Expired<<< host/$HOST@
> > | May 22 18:26:56 >>>Expired<<< host/[EMAIL PROTECTED]
> That does lose information, but I agree that it would be a good idea to
> not show that by default and make people use a flag if they want to see
> exactly when an expired ticket has expired. I'll report this upstream.
The question is, should klist provide a quick overview or all information? I
think it should provide a quick overview. And for this it should output the
really important things, and the expired state is such information. If you want
all informations about the tickets you ask for it with an option. Just check
heimdal klist -v.
| Server: krbtgt/[EMAIL PROTECTED]
| Client: [EMAIL PROTECTED]
| Ticket etype: aes256-cts-hmac-sha1-96, kvno 1
| Ticket length: 322
| Auth time: May 23 09:33:08 2008
| End time: May 23 19:33:08 2008
| Renew till: May 30 09:33:08 2008
| Ticket flags: renewable, initial, pre-authenticated
| Addresses: addressless
> So does MIT if you really don't have renewable tickets.
Yeah, saw later that MIT always request renewable tickets, even if only one
day.
> You have something different -- you have renewable tickets where the
> renewable lifetime is the same as the regular ticket lifetime. If you've
> tried with the same ticket cache with both implementations, my guess is
> that Heimdal is also suppressing the renewable lifetime in that case
> (which is another case where I could see people being unhappy at losing
> that information, even if you normally don't care).
No, heimdal just does not request renewable by default but also never shows
that information in the overview.
Bastian
--
Schshschshchsch.
-- The Gorn, "Arena", stardate 3046.2
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
