Bug#390696: (no subject)

[Frank Burkhardt]

Hi,

On Mon, Oct 02, 2006 at 09:25:18PM -0700, Russ Allbery wrote:

[snip]

> In your original message, you said that you *weren't* getting forwardable
> TGTs and you wanted to change the module so that you would.  I think I'm
> confused.

Sorry. One mory try:

   * 'kinit' get's forwardable TGTs by default (-> whenever it's not explicitely
     forbitten by either 'forwardable=false' in libdefaults or '-F').
   * libauthen-krb5-perl doesn't get forwardable TGTs regardless of what is
     defined in libdefaults.

I just wanted to point out, that getting forwardable TGTs seems to be the default
(because kinit behaves that way). I considered this an indication that the
kerberos guys think, getting forwardable TGTs by default is ok.

> If you put that configuration in your krb5.conf, does this
> module obtain forwardable TGTs for you?

No. I already had 'forwardable = true' in my krb5.conf.

[snip]

Regards,

Frank