Re: Unable to create renewable ticket when we switched to a 1.12 KDC

2015-08-27 Thread Benjamin Kaduk
Hi Ishaan, Russ's comments are almost certainly most relevant to your operational situation, but for completeness, a couple more answers inline. On Fri, 21 Aug 2015, Ishaan Joshi wrote: >Thanks a bunch for the quick responses. Let me restate the problem we > faced ( which is exactly what Ben

Re: Unable to create renewable ticket when we switched to a 1.12 KDC

2015-08-21 Thread Russ Allbery
Ishaan Joshi writes: > Our earlier behaviour was to issue the following kinit to periodically > renew our daemon's ticket: "kinit -r -k -t > ". The time_string was hard coded to a day. The renewal time > was controlled by another option that was passed in. This isn't directly related to th

Re: Unable to create renewable ticket when we switched to a 1.12 KDC

2015-08-21 Thread Ishaan Joshi
Ben, Greg, Thanks a bunch for the quick responses. Let me restate the problem we faced ( which is exactly what Ben described): Our earlier behaviour was to issue the following kinit to periodically renew our daemon's ticket: "kinit -r -k -t ". The time_string was hard coded to a day. The

Re: Unable to create renewable ticket when we switched to a 1.12 KDC

2015-08-20 Thread Greg Hudson
On 08/20/2015 11:45 PM, Benjamin Kaduk wrote: >> We recently ran into a problem wherein the tickets for out service could >> not be renewed. After a lot of digging, we traced the change in behaviour > > Can you say more about the problematic behavior you were experiencing? My > understanding is

Re: Unable to create renewable ticket when we switched to a 1.12 KDC

2015-08-20 Thread Benjamin Kaduk
On Thu, 20 Aug 2015, Ishaan Joshi wrote: > Hi, > > We recently ran into a problem wherein the tickets for out service could > not be renewed. After a lot of digging, we traced the change in behaviour Can you say more about the problematic behavior you were experiencing? My understanding is tha