Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

A very common problem when using a kerberos ticket is that the ticket has expired or that there isn't one. This will prevent Cubbli Linux from accessing any service requiring kerberos tickets including but not limited to those listed above. See common problems.

Using

...

Kerberos tickets

You can see your kerberos ticket using the command klist. Here is an example output of klist, which has been used to access files both in University's file server (Z-drive through SMB) and CS Deparment's file server (/cs/home/ through NFS), to ssh remotely to melkki.cs.helsinki.fi and to print a document to university's smartcard queue:

$ klist
Ticket cache: FILE:/tmp/krb5cc_1033431_JVldy8
Default principal: jjaakkol@AD.HELSINKI.FI

Valid starting     Expires            Service principal
13/07/18 12:05:16  13/07/18 22:05:16  krbtgt/AD.HELSINKI.FI@AD.HELSINKI.FI
    renew until 14/07/18 12:05:14
13/07/18 12:06:47  13/07/18 22:05:16  nfs/nas-fs.cs.helsinki.fi@AD.HELSINKI.FI
    renew until 14/07/18 12:05:14
13/07/18 12:07:03  13/07/18 22:05:16  cifs/home3.ad.helsinki.fi@AD.HELSINKI.FI
    renew until 14/07/18 12:05:14
13/07/18 12:07:51  13/07/18 22:05:16  host/melkki.cs.helsinki.fi@AD.HELSINKI.FI
    renew until 14/07/18 12:05:14
13/07/18 12:08:07  13/07/18 22:05:16  cifs/valkokuusi1.ad.helsinki.fi@AD.HELSINKI.FI

...


Tickets have a limited lifetime after which they cannot be used any more.  There are two different lifetimes:

...