One more thing: if MIT Kerberos is installed, is there a way to populate the 
KRB5CCNAME cache file automatically when I log on to Windows without having to 
use a keytab or having to run a kinit under the covers?

From: Todd Grayson [mailto:tgray...@cloudera.com]
Sent: Friday, November 18, 2016 11:34 AM
To: Mauro Cazzari <mauro.cazz...@sas.com>
Cc: Kerberos@mit.edu
Subject: Re: Can I automatically cache AD tickets into a file on windows?

>From what I understand, the windows SSPI implementation does not provide a 
>facility to hold the credentials in a file.  You would use the MIT KFW to be 
>able to do that.

On Friday, November 18, 2016, Mauro Cazzari 
<mauro.cazz...@sas.com<mailto:mauro.cazz...@sas.com>> wrote:
Kerberos experts,
Is there a way to automatically cache AD-generated tickets to the file provided 
through the KRB5CCNAME environment variable on Windows without having to run a 
kinit? My understanding is that Windows caches tickets in memory (whereas Unix 
does the same on file). Do I need to install MIT Kerberos, or (ideally) can I 
just use the copy of Kerberos that comes with Windows to achieve my goal?
Thanks!
Mauro.
________________________________________________
Kerberos mailing list           Kerberos@mit.edu<javascript:;>
https://mailman.mit.edu/mailman/listinfo/kerberos


--
Todd Grayson
Business Operations Manager
Customer Operations Engineering
Security SME
[http://files.cloudera.com.s3.amazonaws.com/New%20Branding/cloudera-small.png]

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to