The MIT Kerberos program helps you manage your Kerberos tickets. Click the Get Ticket button and enter your principal (your Kerberos identity) and password to obtain a ticket. The ticket allows you to securely access all of the computers and services set up to authenticate you through Kerberos, until the ticket expires, without requiring you to enter your password again.
| On this page | On other pages |
|---|---|
| Learn about... | How to... |
| Ticket Expiration | |
|---|---|
| Your tickets are valid for a set amount of time before they expire and cannot be used again. Usually tickets are valid for around the length of a work day (e.g., 8 hours). A pop up window warns you 15, 10, and 5 minutes before your tickets expire. To add an audible alarm at the same intervals, go to the Options tab and select Expiration Alarm in the Ticket Options panel. | |
| Adjust | View |
| When you get your ticket, click Show Advanced to view and adjust
the ticket's lifetime. Note that some Kerberos installations will not
allow you to adjust the ticket lifetime. How to: Get Tickets |
The main window includes a Valid Until column for each of
your tickets. After the time listed in this column, the ticket will
expire and you must get a new ticket to access network resources that
use Kerberos. How to: View Tickets |
| Renewable Tickets | |
|---|---|
| When you get your ticket, you have the option of flagging the ticket as renewable. Renewable tickets allow you to run batch jobs without interruption and to work through a long session without continually reentering your password. | |
| Renewable Ticket Expiration | Renewable tickets have a normal ticket lifetime, but they also have a renewable lifetime that is much longer (usually several days). Each time you renew your ticket, Kerberos resets the ticket lifetime to the length of the original ticket. You can renew the ticket as often as you need to (once at time or automatically) until the renewable lifetime is reached. Then you must obtain a new ticket. |
| Obtain Renewable Tickets | When you get your ticket, click Show Advanced and then select
Renewable under "Flag this ticket as." Use the Renewable Until slider
to adjust the ticket's renewable lifetime. How to: Get Tickets |
| Renew Once | Click the Renew button. Note that you cannot renew expired tickets even if the ticket is still within its renewable lifespan. How to: Renew Ticket Once |
| Renew Automatically | Go to the Options tab and select Automatic Ticket Renewal in the
Ticket Options panel. Note that MIT Kerberos must be active and running
in order to renew tickets. This means that if your machine is in
hibernation mode or if MIT Kerberos is not running when it is time to
renew your tickets, your tickets will not be renewed. How to: Renew Tickets Automatically |
| View |
In the Options tab, the View Options panel checkboxes control what
information is displayed for your tickets. Two columns relate to
renewable tickets: Renewable Until and Flags.
To see the date and time your renewable tickets expire and can
no longer be renewed, go to the Options tab and select the Renewable
Until checkbox in the View Options panel. To see which of your tickets
are renewable, select Flags.
How to: View Tickets |
| Forwardable Tickets | |
|---|---|
| When you get your ticket, you have the option of flagging the ticket as forwardable and proxiable. Forwardable and proxiable tickets can be forwarded to the remote host when you connect via telnet, ssh, ftp, rlogin, or similar applications, so you will not need to get new tickets to use remote services. | |
| Obtain Forwardable Tickets | View |
| When you get your ticket, click Show Advanced and then select Forwardable and Proxiable under "Flag this ticket as." How to: Get Tickets |
In the Options tab, the View Options panel checkboxes control what
information is displayed for your tickets. Select the Flags checkbox to
open a column indicating which of your tickets are forwardable. How to: View Tickets |