Kerberos缓存票证 [英] Kerberos Cached Ticket

问题描述

我在Windows 7(64位)上，并且创建了一个简单的应用程序来对实现PrivilegedAction的类的run方法中的文件进行计数.以下是我的jaas.conf文件:

I am on windows 7 (64-bit) and I have created a simple app to count files in the run method of a class that implements PrivilegedAction. following is my jaas.conf file:

CountFiles {
    com.sun.security.auth.module.Krb5LoginModule required 
    useTicketCache=true
    debug=true;
};

我收到以下消息.

Debug is  true storeKey false useTicketCache true useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
Acquire TGT from Cache
Credentials are no longer valid
Principal is null
null credentials from Ticket Cache

并且程序在此之后引发LoginException，但是，如果我在Windows命令行上执行kinit.exe，那么它可以给我计数.

and the program throws LoginException after that, however if I execute the kinit.exe on windows command line then it is able to give me the count.

我还将以下注册表值设置为1:

I have also setup the following registry value to 1:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters
Value Name: AllowTGTSessionKey
Value Type: REG_DWORD
Value: 1

您能告诉我如何访问系统中缓存的kerberos票吗?

Can you please tell how to access the kerberos tickets cached on the system?

谢谢.

推荐答案

我找到了问题的答案，方法是删除用户名位于C:\ Users下的文件夹中的krb5cc *文件.该文件是由kinit.exe创建的.

I found the answer to my question by deleting krb5cc* file in a folder with my user name under C:\Users. The file was created by kinit.exe.

这篇关于Kerberos缓存票证的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！