1*7f2fe78bSCy Schubert<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN"> 2*7f2fe78bSCy Schubert<html><head> 3*7f2fe78bSCy Schubert<meta name="GENERATOR" content="Microsoft� HTML Help Workshop 4.1"> 4*7f2fe78bSCy Schubert 5*7f2fe78bSCy Schubert<link rel="stylesheet" type="text/css" href="Leash.css"> 6*7f2fe78bSCy Schubert<title>Tickets</title></head> 7*7f2fe78bSCy Schubert 8*7f2fe78bSCy Schubert<body> 9*7f2fe78bSCy Schubert <h1><a name="top">About Tickets</a></h1> 10*7f2fe78bSCy Schubert<p> 11*7f2fe78bSCy SchubertThe MIT Kerberos program helps you manage your Kerberos tickets. Click 12*7f2fe78bSCy Schubertthe Get Ticket button and enter your principal (your Kerberos identity) 13*7f2fe78bSCy Schubertand password to obtain a ticket. The ticket allows you to securely 14*7f2fe78bSCy Schubertaccess all of the computers and services set up to authenticate you 15*7f2fe78bSCy Schubertthrough Kerberos, until the ticket expires, without requiring you to 16*7f2fe78bSCy Schubertenter your password again. </p> 17*7f2fe78bSCy Schubert 18*7f2fe78bSCy Schubert<table> 19*7f2fe78bSCy Schubert<tbody><tr><th>On this page</th><th>On other pages</th></tr> 20*7f2fe78bSCy Schubert<tr> 21*7f2fe78bSCy Schubert<td><b>Learn about...</b> 22*7f2fe78bSCy Schubert<ul id="helpul"> 23*7f2fe78bSCy Schubert<li><a href="#expiration"> Ticket expiration </a></li> 24*7f2fe78bSCy Schubert<li><a href="#renewable"> Renewable tickets</a></li> 25*7f2fe78bSCy Schubert<li><a href="#forwardable"> Forwardable tickets </a></li> 26*7f2fe78bSCy Schubert</ul> 27*7f2fe78bSCy Schubert</td> 28*7f2fe78bSCy Schubert<td> 29*7f2fe78bSCy Schubert<b>How to...</b> 30*7f2fe78bSCy Schubert<ul id="helpul"> 31*7f2fe78bSCy Schubert<li><a href="HTML/Get_Tickets.htm">Get tickets</a></li> 32*7f2fe78bSCy Schubert<li><a href="HTML/Renew_Tickets.htm">Renew tickets</a></li> 33*7f2fe78bSCy Schubert<li><a href="HTML/View_Tickets.htm">View tickets</a></li> 34*7f2fe78bSCy Schubert<li><a href="HTML/Ticket_Settings.htm">Work with ticket settings and flags</a> 35*7f2fe78bSCy Schubert</li><li><a href="HTML/Destroy_Tickets.htm">Destroy tickets</a></li> 36*7f2fe78bSCy Schubert</ul> 37*7f2fe78bSCy Schubert</td> 38*7f2fe78bSCy Schubert</tr> 39*7f2fe78bSCy Schubert</tbody></table> 40*7f2fe78bSCy Schubert<p></p> 41*7f2fe78bSCy Schubert 42*7f2fe78bSCy Schubert 43*7f2fe78bSCy Schubert<table> 44*7f2fe78bSCy Schubert<tbody><tr><th colspan="2"><a name="expiration">Ticket Expiration</a></th></tr> 45*7f2fe78bSCy Schubert<tr><td colspan="2">Your tickets are valid for a set amount of time 46*7f2fe78bSCy Schubertbefore they expire and cannot be used again. Usually tickets are valid 47*7f2fe78bSCy Schubertfor around the length of a work day (e.g., 8 hours). A pop up window 48*7f2fe78bSCy Schubertwarns you 15, 10, and 5 minutes before your tickets expire. To add an 49*7f2fe78bSCy Schubertaudible alarm at the same intervals, go to the Options tab and select 50*7f2fe78bSCy SchubertExpiration Alarm in the Ticket Options panel.</td></tr> 51*7f2fe78bSCy Schubert<tr> <th id="th2">Adjust</th><th id="th2">View</th></tr> 52*7f2fe78bSCy Schubert<tr> 53*7f2fe78bSCy Schubert<td>When you get your ticket, click Show Advanced to view and adjust 54*7f2fe78bSCy Schubertthe ticket's lifetime. Note that some Kerberos installations will not 55*7f2fe78bSCy Schubertallow you to adjust the ticket lifetime. <br> <a href="HTML/Get_Tickets.htm">How to: Get Tickets </a></td> 56*7f2fe78bSCy Schubert<td>The main window includes a <b>Valid Until</b> column for each of 57*7f2fe78bSCy Schubertyour tickets. After the time listed in this column, the ticket will 58*7f2fe78bSCy Schubertexpire and you must get a new ticket to access network resources that 59*7f2fe78bSCy Schubertuse Kerberos. <br> <a href="HTML/View_Tickets.htm">How to: View Tickets </a></td> 60*7f2fe78bSCy Schubert</tr> 61*7f2fe78bSCy Schubert</tbody></table> 62*7f2fe78bSCy Schubert<p> 63*7f2fe78bSCy Schubert<a href="#top">Back to Top</a> </p> 64*7f2fe78bSCy Schubert<p></p> 65*7f2fe78bSCy Schubert<table> 66*7f2fe78bSCy Schubert<tbody><tr><th colspan="2"><a name="renewable">Renewable Tickets </a> </th></tr> 67*7f2fe78bSCy Schubert<tr><td colspan="2">When you get your ticket, you have the option of 68*7f2fe78bSCy Schubertflagging the ticket as renewable. Renewable tickets allow you to run 69*7f2fe78bSCy Schubertbatch jobs without interruption and to work through a long session 70*7f2fe78bSCy Schubertwithout continually reentering your password. <p></p> 71*7f2fe78bSCy Schubert</td></tr><tr> <th id="th2">Renewable Ticket Expiration</th> 72*7f2fe78bSCy Schubert<td>Renewable tickets have a normal ticket lifetime, but they also have 73*7f2fe78bSCy Schuberta renewable lifetime that is much longer (usually several days). Each 74*7f2fe78bSCy Schuberttime you renew your ticket, Kerberos resets the ticket lifetime to the 75*7f2fe78bSCy Schubertlength of the original ticket. You can renew the ticket as often as you 76*7f2fe78bSCy Schubertneed to (once at time or automatically) until the renewable lifetime is 77*7f2fe78bSCy Schubertreached. Then you must obtain a new ticket. </td></tr> 78*7f2fe78bSCy Schubert<tr> <th id="th2">Obtain Renewable Tickets</th> 79*7f2fe78bSCy Schubert<td>When you get your ticket, click Show Advanced and then select 80*7f2fe78bSCy SchubertRenewable under "Flag this ticket as." Use the Renewable Until slider 81*7f2fe78bSCy Schubertto adjust the ticket's renewable lifetime. <br> 82*7f2fe78bSCy Schubert<a href="HTML/Get_Tickets.htm">How to: Get Tickets </a></td> 83*7f2fe78bSCy Schubert</tr> 84*7f2fe78bSCy Schubert<tr> <th id="th2">Renew Once</th> 85*7f2fe78bSCy Schubert<td> Click the Renew button. Note that you cannot renew expired tickets even if the ticket is still within its renewable lifespan. <br> 86*7f2fe78bSCy Schubert <a href="HTML/Renew_Tickets.htm#renew-once">How to: Renew Ticket Once </a></td></tr> 87*7f2fe78bSCy Schubert<tr><th id="th2">Renew Automatically</th> 88*7f2fe78bSCy Schubert<td>Go to the Options tab and select Automatic Ticket Renewal in the 89*7f2fe78bSCy SchubertTicket Options panel. Note that MIT Kerberos must be active and running 90*7f2fe78bSCy Schubertin order to renew tickets. This means that if your machine is in 91*7f2fe78bSCy Schuberthibernation mode or if MIT Kerberos is not running when it is time to 92*7f2fe78bSCy Schubertrenew your tickets, your tickets will not be renewed. <br> 93*7f2fe78bSCy Schubert<a href="HTML/Renew_Tickets.htm#renew-once">How to: Renew Tickets Automatically </a> </td> 94*7f2fe78bSCy Schubert</tr><tr> 95*7f2fe78bSCy Schubert<th id="th2">View </th> 96*7f2fe78bSCy Schubert<td> 97*7f2fe78bSCy SchubertIn the Options tab, the View Options panel checkboxes control what 98*7f2fe78bSCy Schubertinformation is displayed for your tickets. Two columns relate to 99*7f2fe78bSCy Schubertrenewable tickets: Renewable Until and Flags. 100*7f2fe78bSCy Schubert<p></p>To see the date and time your renewable tickets expire and can 101*7f2fe78bSCy Schubertno longer be renewed, go to the Options tab and select the Renewable 102*7f2fe78bSCy SchubertUntil checkbox in the View Options panel. To see which of your tickets 103*7f2fe78bSCy Schubertare renewable, select Flags. 104*7f2fe78bSCy Schubert<br> 105*7f2fe78bSCy Schubert <a href="HTML/View_Tickets.htm">How to: View Tickets </a> </td> 106*7f2fe78bSCy Schubert</tr> 107*7f2fe78bSCy Schubert</tbody></table> 108*7f2fe78bSCy Schubert<p> 109*7f2fe78bSCy Schubert<a href="#top">Back to Top</a> </p> 110*7f2fe78bSCy Schubert<p></p> 111*7f2fe78bSCy Schubert<table> 112*7f2fe78bSCy Schubert<tbody><tr><th colspan="2"><a name="forwardable">Forwardable Tickets </a></th></tr> 113*7f2fe78bSCy Schubert<tr><td colspan="2">When you get your ticket, you have the option of 114*7f2fe78bSCy Schubertflagging the ticket as forwardable and proxiable. Forwardable and 115*7f2fe78bSCy Schubertproxiable tickets can be forwarded to the remote host when you connect 116*7f2fe78bSCy Schubertvia telnet, ssh, ftp, rlogin, or similar applications, so you will not 117*7f2fe78bSCy Schubertneed to get new tickets to use remote services.</td></tr> 118*7f2fe78bSCy Schubert<tr> <th id="th2">Obtain Forwardable Tickets</th><th id="th2"> View</th></tr> 119*7f2fe78bSCy Schubert<tr> 120*7f2fe78bSCy Schubert<td>When you get your ticket, click Show Advanced and then select Forwardable and Proxiable under "Flag this ticket as." <br> 121*7f2fe78bSCy Schubert<a href="HTML/Get_Tickets.htm">How to: Get Tickets </a></td> 122*7f2fe78bSCy Schubert<td> In the Options tab, the View Options panel checkboxes control what 123*7f2fe78bSCy Schubertinformation is displayed for your tickets. Select the Flags checkbox to 124*7f2fe78bSCy Schubertopen a column indicating which of your tickets are forwardable. <br> <a href="HTML/View_Tickets.htm">How to: View Tickets </a> </td> 125*7f2fe78bSCy Schubert</tr> 126*7f2fe78bSCy Schubert</tbody></table> 127*7f2fe78bSCy Schubert<p> 128*7f2fe78bSCy Schubert<a href="#top">Back to Top</a> </p> 129*7f2fe78bSCy Schubert 130*7f2fe78bSCy Schubert 131*7f2fe78bSCy Schubert<script language="JavaScript"> 132*7f2fe78bSCy Schubertpopfont="Arial,.825,," 133*7f2fe78bSCy SchubertpopupTicket="A Kerberos ticket is an encrypted block of data that includes authentication for the user and an expiration time." 134*7f2fe78bSCy Schubert 135*7f2fe78bSCy Schubert</script> 136*7f2fe78bSCy Schubert 137*7f2fe78bSCy Schubert<object id="popup" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11"> 138*7f2fe78bSCy Schubert</object> 139*7f2fe78bSCy Schubert</body></html> 140