1<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN"> 2<html><head> 3<meta name="GENERATOR" content="Microsoft� HTML Help Workshop 4.1"> 4 5<link rel="stylesheet" type="text/css" href="Leash.css"> 6<title>Tickets</title></head> 7 8<body> 9 <h1><a name="top">About Tickets</a></h1> 10<p> 11The MIT Kerberos program helps you manage your Kerberos tickets. Click 12the Get Ticket button and enter your principal (your Kerberos identity) 13and password to obtain a ticket. The ticket allows you to securely 14access all of the computers and services set up to authenticate you 15through Kerberos, until the ticket expires, without requiring you to 16enter your password again. </p> 17 18<table> 19<tbody><tr><th>On this page</th><th>On other pages</th></tr> 20<tr> 21<td><b>Learn about...</b> 22<ul id="helpul"> 23<li><a href="#expiration"> Ticket expiration </a></li> 24<li><a href="#renewable"> Renewable tickets</a></li> 25<li><a href="#forwardable"> Forwardable tickets </a></li> 26</ul> 27</td> 28<td> 29<b>How to...</b> 30<ul id="helpul"> 31<li><a href="HTML/Get_Tickets.htm">Get tickets</a></li> 32<li><a href="HTML/Renew_Tickets.htm">Renew tickets</a></li> 33<li><a href="HTML/View_Tickets.htm">View tickets</a></li> 34<li><a href="HTML/Ticket_Settings.htm">Work with ticket settings and flags</a> 35</li><li><a href="HTML/Destroy_Tickets.htm">Destroy tickets</a></li> 36</ul> 37</td> 38</tr> 39</tbody></table> 40<p></p> 41 42 43<table> 44<tbody><tr><th colspan="2"><a name="expiration">Ticket Expiration</a></th></tr> 45<tr><td colspan="2">Your tickets are valid for a set amount of time 46before they expire and cannot be used again. Usually tickets are valid 47for around the length of a work day (e.g., 8 hours). A pop up window 48warns you 15, 10, and 5 minutes before your tickets expire. To add an 49audible alarm at the same intervals, go to the Options tab and select 50Expiration Alarm in the Ticket Options panel.</td></tr> 51<tr> <th id="th2">Adjust</th><th id="th2">View</th></tr> 52<tr> 53<td>When you get your ticket, click Show Advanced to view and adjust 54the ticket's lifetime. Note that some Kerberos installations will not 55allow you to adjust the ticket lifetime. <br> <a href="HTML/Get_Tickets.htm">How to: Get Tickets </a></td> 56<td>The main window includes a <b>Valid Until</b> column for each of 57your tickets. After the time listed in this column, the ticket will 58expire and you must get a new ticket to access network resources that 59use Kerberos. <br> <a href="HTML/View_Tickets.htm">How to: View Tickets </a></td> 60</tr> 61</tbody></table> 62<p> 63<a href="#top">Back to Top</a> </p> 64<p></p> 65<table> 66<tbody><tr><th colspan="2"><a name="renewable">Renewable Tickets </a> </th></tr> 67<tr><td colspan="2">When you get your ticket, you have the option of 68flagging the ticket as renewable. Renewable tickets allow you to run 69batch jobs without interruption and to work through a long session 70without continually reentering your password. <p></p> 71</td></tr><tr> <th id="th2">Renewable Ticket Expiration</th> 72<td>Renewable tickets have a normal ticket lifetime, but they also have 73a renewable lifetime that is much longer (usually several days). Each 74time you renew your ticket, Kerberos resets the ticket lifetime to the 75length of the original ticket. You can renew the ticket as often as you 76need to (once at time or automatically) until the renewable lifetime is 77reached. Then you must obtain a new ticket. </td></tr> 78<tr> <th id="th2">Obtain Renewable Tickets</th> 79<td>When you get your ticket, click Show Advanced and then select 80Renewable under "Flag this ticket as." Use the Renewable Until slider 81to adjust the ticket's renewable lifetime. <br> 82<a href="HTML/Get_Tickets.htm">How to: Get Tickets </a></td> 83</tr> 84<tr> <th id="th2">Renew Once</th> 85<td> Click the Renew button. Note that you cannot renew expired tickets even if the ticket is still within its renewable lifespan. <br> 86 <a href="HTML/Renew_Tickets.htm#renew-once">How to: Renew Ticket Once </a></td></tr> 87<tr><th id="th2">Renew Automatically</th> 88<td>Go to the Options tab and select Automatic Ticket Renewal in the 89Ticket Options panel. Note that MIT Kerberos must be active and running 90in order to renew tickets. This means that if your machine is in 91hibernation mode or if MIT Kerberos is not running when it is time to 92renew your tickets, your tickets will not be renewed. <br> 93<a href="HTML/Renew_Tickets.htm#renew-once">How to: Renew Tickets Automatically </a> </td> 94</tr><tr> 95<th id="th2">View </th> 96<td> 97In the Options tab, the View Options panel checkboxes control what 98information is displayed for your tickets. Two columns relate to 99renewable tickets: Renewable Until and Flags. 100<p></p>To see the date and time your renewable tickets expire and can 101no longer be renewed, go to the Options tab and select the Renewable 102Until checkbox in the View Options panel. To see which of your tickets 103are renewable, select Flags. 104<br> 105 <a href="HTML/View_Tickets.htm">How to: View Tickets </a> </td> 106</tr> 107</tbody></table> 108<p> 109<a href="#top">Back to Top</a> </p> 110<p></p> 111<table> 112<tbody><tr><th colspan="2"><a name="forwardable">Forwardable Tickets </a></th></tr> 113<tr><td colspan="2">When you get your ticket, you have the option of 114flagging the ticket as forwardable and proxiable. Forwardable and 115proxiable tickets can be forwarded to the remote host when you connect 116via telnet, ssh, ftp, rlogin, or similar applications, so you will not 117need to get new tickets to use remote services.</td></tr> 118<tr> <th id="th2">Obtain Forwardable Tickets</th><th id="th2"> View</th></tr> 119<tr> 120<td>When you get your ticket, click Show Advanced and then select Forwardable and Proxiable under "Flag this ticket as." <br> 121<a href="HTML/Get_Tickets.htm">How to: Get Tickets </a></td> 122<td> In the Options tab, the View Options panel checkboxes control what 123information is displayed for your tickets. Select the Flags checkbox to 124open a column indicating which of your tickets are forwardable. <br> <a href="HTML/View_Tickets.htm">How to: View Tickets </a> </td> 125</tr> 126</tbody></table> 127<p> 128<a href="#top">Back to Top</a> </p> 129 130 131<script language="JavaScript"> 132popfont="Arial,.825,," 133popupTicket="A Kerberos ticket is an encrypted block of data that includes authentication for the user and an expiration time." 134 135</script> 136 137<object id="popup" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11"> 138</object> 139</body></html> 140