xref: /freebsd/crypto/krb5/src/windows/leash/htmlhelp/html/Tickets.htm (revision 7f2fe78b9dd5f51c821d771b63d2e096f6fd49e9)
1<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
2<html><head>
3<meta name="GENERATOR" content="Microsoft� HTML Help Workshop 4.1">
4
5<link rel="stylesheet" type="text/css" href="Leash.css">
6<title>Tickets</title></head>
7
8<body>
9 <h1><a name="top">About Tickets</a></h1>
10<p>
11The MIT Kerberos program helps you manage your Kerberos tickets. Click
12the Get Ticket button and enter your principal (your Kerberos identity)
13and password to obtain a ticket. The ticket allows you to securely
14access all of the computers and services set up to authenticate you
15through Kerberos, until the ticket expires, without requiring you to
16enter your password again. </p>
17
18<table>
19<tbody><tr><th>On this page</th><th>On other pages</th></tr>
20<tr>
21<td><b>Learn about...</b>
22<ul id="helpul">
23<li><a href="#expiration"> Ticket expiration </a></li>
24<li><a href="#renewable"> Renewable tickets</a></li>
25<li><a href="#forwardable"> Forwardable tickets </a></li>
26</ul>
27</td>
28<td>
29<b>How to...</b>
30<ul id="helpul">
31<li><a href="HTML/Get_Tickets.htm">Get tickets</a></li>
32<li><a href="HTML/Renew_Tickets.htm">Renew tickets</a></li>
33<li><a href="HTML/View_Tickets.htm">View tickets</a></li>
34<li><a href="HTML/Ticket_Settings.htm">Work with ticket settings and flags</a>
35</li><li><a href="HTML/Destroy_Tickets.htm">Destroy tickets</a></li>
36</ul>
37</td>
38</tr>
39</tbody></table>
40<p></p>
41
42
43<table>
44<tbody><tr><th colspan="2"><a name="expiration">Ticket Expiration</a></th></tr>
45<tr><td colspan="2">Your tickets are valid for a set amount of time
46before they expire and cannot be used again. Usually tickets are valid
47for around the length of a work day (e.g., 8 hours). A pop up window
48warns you 15, 10, and 5 minutes before your tickets expire. To add an
49audible alarm at the same intervals, go to the Options tab and select
50Expiration Alarm in the Ticket Options panel.</td></tr>
51<tr> <th id="th2">Adjust</th><th id="th2">View</th></tr>
52<tr>
53<td>When you get your ticket, click Show Advanced to view and adjust
54the ticket's lifetime. Note that some Kerberos installations will not
55allow you to adjust the ticket lifetime. <br> <a href="HTML/Get_Tickets.htm">How to: Get Tickets </a></td>
56<td>The main window includes a <b>Valid Until</b> column for each of
57your tickets. After the time listed in this column, the ticket will
58expire and you must get a new ticket to access network resources that
59use Kerberos. <br> <a href="HTML/View_Tickets.htm">How to: View Tickets </a></td>
60</tr>
61</tbody></table>
62<p>
63<a href="#top">Back to Top</a> </p>
64<p></p>
65<table>
66<tbody><tr><th colspan="2"><a name="renewable">Renewable Tickets </a> </th></tr>
67<tr><td colspan="2">When you get your ticket, you have the option of
68flagging the ticket as renewable. Renewable tickets allow you to run
69batch jobs without interruption and to work through a long session
70without continually reentering your password. <p></p>
71</td></tr><tr> <th id="th2">Renewable Ticket Expiration</th>
72<td>Renewable tickets have a normal ticket lifetime, but they also have
73a renewable lifetime that is much longer (usually several days). Each
74time you renew your ticket, Kerberos resets the ticket lifetime to the
75length of the original ticket. You can renew the ticket as often as you
76need to (once at time or automatically) until the renewable lifetime is
77reached. Then you must obtain a new ticket. </td></tr>
78<tr> <th id="th2">Obtain Renewable Tickets</th>
79<td>When you get your ticket, click Show Advanced and then select
80Renewable under "Flag this ticket as." Use the Renewable Until slider
81to adjust the ticket's renewable lifetime. <br>
82<a href="HTML/Get_Tickets.htm">How to: Get Tickets </a></td>
83</tr>
84<tr> <th id="th2">Renew Once</th>
85<td> Click the Renew button. Note that you cannot renew expired tickets even if the ticket is still within its renewable lifespan.  <br>
86 <a href="HTML/Renew_Tickets.htm#renew-once">How to: Renew Ticket Once </a></td></tr>
87<tr><th id="th2">Renew Automatically</th>
88<td>Go to the Options tab and select Automatic Ticket Renewal in the
89Ticket Options panel. Note that MIT Kerberos must be active and running
90in order to renew tickets. This means that if your machine is in
91hibernation mode or if MIT Kerberos is not running when it is time to
92renew your tickets, your tickets will not be renewed. <br>
93<a href="HTML/Renew_Tickets.htm#renew-once">How to: Renew Tickets Automatically </a> </td>
94</tr><tr>
95<th id="th2">View </th>
96<td>
97In the Options tab, the View Options panel checkboxes control what
98information is displayed for your tickets. Two columns relate to
99renewable tickets: Renewable Until and Flags.
100<p></p>To see the date and time your renewable tickets expire and can
101no longer be renewed, go to the Options tab and select the Renewable
102Until checkbox in the View Options panel. To see which of your tickets
103are renewable, select Flags.
104<br>
105 <a href="HTML/View_Tickets.htm">How to: View Tickets </a> </td>
106</tr>
107</tbody></table>
108<p>
109<a href="#top">Back to Top</a> </p>
110<p></p>
111<table>
112<tbody><tr><th colspan="2"><a name="forwardable">Forwardable Tickets </a></th></tr>
113<tr><td colspan="2">When you get your ticket, you have the option of
114flagging the ticket as forwardable and proxiable. Forwardable and
115proxiable tickets can be forwarded to the remote host when you connect
116via telnet, ssh, ftp, rlogin, or similar applications, so you will not
117need to get new tickets to use remote services.</td></tr>
118<tr> <th id="th2">Obtain Forwardable Tickets</th><th id="th2"> View</th></tr>
119<tr>
120<td>When you get your ticket, click Show Advanced and  then select Forwardable and Proxiable under "Flag this ticket as."   <br>
121<a href="HTML/Get_Tickets.htm">How to: Get Tickets </a></td>
122<td> In the Options tab, the View Options panel checkboxes control what
123information is displayed for your tickets. Select the Flags checkbox to
124open a column indicating which of your tickets are forwardable. <br> <a href="HTML/View_Tickets.htm">How to: View Tickets </a> </td>
125</tr>
126</tbody></table>
127<p>
128<a href="#top">Back to Top</a> </p>
129
130
131<script language="JavaScript">
132popfont="Arial,.825,,"
133popupTicket="A Kerberos ticket is an encrypted block of data that includes authentication for the user and an expiration time."
134
135</script>
136
137<object id="popup" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
138</object>
139</body></html>
140