[19903] in Kerberos_V5_Development
Re: Why is kcpytkt not shipped in a normal installation?
daemon@ATHENA.MIT.EDU (Robbie Harwood)
Wed Mar 6 13:39:30 2019
From: Robbie Harwood <rharwood@redhat.com>
To: Daniel Peebles <pumpkingod@gmail.com>, Greg Hudson <ghudson@mit.edu>
In-Reply-To: <CANaM3xCqGsw2fSTp5L-4u9MJ0S-8+0Mxmk-pwOYbJRTZzYKz-A@mail.gmail.com>
Date: Wed, 6 Mar 2019 13:39:02 -0500
Message-ID: <jlgr2bjdf09.fsf@redhat.com>
MIME-Version: 1.0
Cc: krbdev@mit.edu
Content-Type: multipart/mixed; boundary="===============0355968540450487675=="
Errors-To: krbdev-bounces@mit.edu
--===============0355968540450487675==
Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512;
protocol="application/pgp-signature"
--=-=-=
Content-Type: text/plain
Daniel Peebles <pumpkingod@gmail.com> writes:
> Thanks for the history!
>
> For various obscure domain-specific reasons I won't go into, I need to
> ship service-specific tickets to a semi-trusted machine that doesn't
> (and shouldn't) have the TGT, so I use kvno to acquire a service
> ticket and then kcpytkt to get it out of my ccache and ship it over to
> the other machine. I'll admit it's probably a pretty unusual use case
> but I imagine that more generally folks might want to copy tickets
> between caches (and probably delete them too).
>
> Would you accept a patch to revive their makefile machinery?
It seems to me like you could use `kinit -S` for this, and then copy the
ticket over. I don't think we need a whole separate command for this.
Thanks,
--Robbie
--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----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=9Q8b
-----END PGP SIGNATURE-----
--=-=-=--
--===============0355968540450487675==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
--===============0355968540450487675==--
