1*7f2fe78bSCy Schubert<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN"> 2*7f2fe78bSCy Schubert<html><head> 3*7f2fe78bSCy Schubert<meta name="GENERATOR" content="Microsoft� HTML Help Workshop 4.1"> 4*7f2fe78bSCy Schubert<link rel="stylesheet" type="text/css" href="Leash.css"> 5*7f2fe78bSCy Schubert<title>View Tickets</title></head> 6*7f2fe78bSCy Schubert 7*7f2fe78bSCy Schubert<body> 8*7f2fe78bSCy Schubert<h1>View Tickets</h1> 9*7f2fe78bSCy Schubert<p> 10*7f2fe78bSCy Schubert MIT Kerberos displays your tickets in the main window. The tickets (if any) are organized by the <a href="JavaScript:popup.TextPopup(popupPrincipal, popfont,9,9,-1,-1)">principal</a> who owns them. To the right of the principal are columns with information about the tickets. 11*7f2fe78bSCy Schubert</p><ul> 12*7f2fe78bSCy Schubert<li>To show or hide information columns, use the View Options panel in the Options tab. <a href="HTML/Options_Tab.htm#using-view-options">How to: Use View Options Panel </a> </li> 13*7f2fe78bSCy Schubert<li>To make a column wider or narrower, click and drag the line separating two column headings. </li> 14*7f2fe78bSCy Schubert<li>To see information for all of a principal's tickets, click the 15*7f2fe78bSCy Schubertarrow next to the principal name. Otherwise the information displayed 16*7f2fe78bSCy Schubertapplies only to the initial Ticket Granting Ticket (TGT). </li> 17*7f2fe78bSCy Schubert</ul> 18*7f2fe78bSCy Schubert<p> 19*7f2fe78bSCy Schubert Use the table below to jump to a column description, or scroll down to view all available columns.</p> 20*7f2fe78bSCy Schubert 21*7f2fe78bSCy Schubert<table> 22*7f2fe78bSCy Schubert<tbody><tr> 23*7f2fe78bSCy Schubert<th id="th2">Learn about...</th> 24*7f2fe78bSCy Schubert<td> 25*7f2fe78bSCy Schubert<ul id="helpul"> 26*7f2fe78bSCy Schubert<li><a href="#principal"> Principal</a></li> 27*7f2fe78bSCy Schubert<li><a href="#issued"> Issued</a></li> 28*7f2fe78bSCy Schubert<li><a href="#renewable-until"> Renewable Until</a></li> 29*7f2fe78bSCy Schubert<li><a href="#valid-until"> Valid Until</a></li> 30*7f2fe78bSCy Schubert<li><a href="#encryption-type"> Encryption Type</a></li> 31*7f2fe78bSCy Schubert<li><a href="#flags"> Flags (renewable and forwardable)</a></li> 32*7f2fe78bSCy Schubert 33*7f2fe78bSCy Schubert 34*7f2fe78bSCy Schubert</ul> 35*7f2fe78bSCy Schubert</td> 36*7f2fe78bSCy Schubert</tr> 37*7f2fe78bSCy Schubert</tbody></table> 38*7f2fe78bSCy Schubert<a name="table"><p></p></a> 39*7f2fe78bSCy Schubert <table> 40*7f2fe78bSCy Schubert<tbody><tr> 41*7f2fe78bSCy Schubert<th>Column</th> 42*7f2fe78bSCy Schubert<th>Description</th> 43*7f2fe78bSCy Schubert</tr> 44*7f2fe78bSCy Schubert <tr> 45*7f2fe78bSCy Schubert<th id="th2"> Principal </th> 46*7f2fe78bSCy Schubert 47*7f2fe78bSCy Schubert<td> <a name="principal"> The identity that has obtained the ticket. </a>This is your user name (e.g., <tt>Jsmith</tt>) plus the Kerberos <a href="JavaScript:popup.TextPopup(popupRealm, popfont,9,9,-1,-1)"> realm</a> (or Windows domain) you belong to (e.g.,<tt> @SERVER.MEGACORP.COM</tt>). If like many users you have only one Kerberos name and belong to only one realm, you will have only one principal. 48*7f2fe78bSCy Schubert<p></p> 49*7f2fe78bSCy SchubertThe principal that is currently the default principal appears in bold. <a href="HTML/Principals.htm#default-principal">About: Default Principals</a> 50*7f2fe78bSCy Schubert<p></p> 51*7f2fe78bSCy SchubertThe information displayed in the columns to the right of the principal 52*7f2fe78bSCy Schubertapplies only to the principal's initial Ticket Granting Ticket (TGT). 53*7f2fe78bSCy SchubertClick the arrow in front of the principal name to expand the view. 54*7f2fe78bSCy SchubertThe expanded view shows all of the tickets and session keys issued to 55*7f2fe78bSCy Schubertthe principal. The TGT is listed with a prefix of <em>krbtgt</em>. Any other tickets and session keys were automatically issued when you accessed a service through Kerberos. <br> 56*7f2fe78bSCy Schubert<a href="HTML/Kerberos_Terminology.htm#ticket">About: Kerberos Terminology (Tickets)</a></td> 57*7f2fe78bSCy Schubert</tr> 58*7f2fe78bSCy Schubert 59*7f2fe78bSCy Schubert <tr> 60*7f2fe78bSCy Schubert<th id="th2"> <a name="issued">Issued</a> </th> 61*7f2fe78bSCy Schubert 62*7f2fe78bSCy Schubert<td>The date and time the ticket was originally obtained.</td> 63*7f2fe78bSCy Schubert</tr> 64*7f2fe78bSCy Schubert <tr> 65*7f2fe78bSCy Schubert<th id="th2"> Renewable Until </th> 66*7f2fe78bSCy Schubert 67*7f2fe78bSCy Schubert<td> <a name="renewable-until">The date and time marking the end of each ticket's renewable lifetime.</a> If the column is <a href="JavaScript:popup.TextPopup(popupWideEnough, popfont,9,9,-1,-1)"> wide enough</a> 68*7f2fe78bSCy Schubertyou will also see the number of days and hours remaining in the 69*7f2fe78bSCy Schubertticket's renewable lifetime. After this time, you cannot renew the 70*7f2fe78bSCy Schubertticket and must instead get a new one. <p></p> 71*7f2fe78bSCy SchubertIf this column shows <em>Not Renewable</em>, the ticket was not flagged as renewable when you obtained it. 72*7f2fe78bSCy Schubert<p></p> 73*7f2fe78bSCy Schubert<b>Related Help:</b><ul id="helpul"> 74*7f2fe78bSCy Schubert<li> <a href="HTML/Tickets.htm#renewable"> About renewable tickets</a> </li> 75*7f2fe78bSCy Schubert<li><a href="HTML/Renew_Tickets.htm"> Renew tickets</a></li> 76*7f2fe78bSCy Schubert</ul> 77*7f2fe78bSCy Schubert</td> 78*7f2fe78bSCy Schubert</tr> 79*7f2fe78bSCy Schubert <tr> 80*7f2fe78bSCy Schubert<th id="th2"> Valid Until </th> 81*7f2fe78bSCy Schubert 82*7f2fe78bSCy Schubert<td> <a name="valid-until"> The date and time the ticket will expire and can no longer be used or renewed.</a> If the column is <a href="JavaScript:popup.TextPopup(popupWideEnough, popfont,9,9,-1,-1)"> wide enough</a> 83*7f2fe78bSCy Schubertyou will also see the number of hours and minutes remaining before the 84*7f2fe78bSCy Schubertticket expires. Kerberos alerts you to expiring tickets with a warning 85*7f2fe78bSCy Schubertin a pop up window. <p></p> 86*7f2fe78bSCy SchubertTo add an audible warning, open the Options tab and select <b>Expiration Alarm</b> in the Ticket Options panel. <br> 87*7f2fe78bSCy Schubert<a href="HTML/Options_Tab.htm#using-ticket-options">How to: Use Ticket Options Panel</a> 88*7f2fe78bSCy Schubert</td> 89*7f2fe78bSCy Schubert</tr> 90*7f2fe78bSCy Schubert <tr> 91*7f2fe78bSCy Schubert<th id="th2"> Encryption Type </th> 92*7f2fe78bSCy Schubert 93*7f2fe78bSCy Schubert<td><a name="encryption-type">Shows what type of encryption was used to encode the session key and the ticket.</a> 94*7f2fe78bSCy SchubertKerberos supports multiple types of encryption. The type used for a 95*7f2fe78bSCy Schubertparticular ticket or session key is automatically negotiated when you 96*7f2fe78bSCy Schubertrequest a ticket or a service.<br> 97*7f2fe78bSCy Schubert<a href="HTML/Encryption_Types.htm#supported-types">About: Encryption Types</a> </td> 98*7f2fe78bSCy Schubert</tr> 99*7f2fe78bSCy Schubert<tr> 100*7f2fe78bSCy Schubert<th id="th2"> Flags </th> 101*7f2fe78bSCy Schubert<td><a name="flags">Shows how the tickets were flagged (renewable and/or fowardable) when you obtained them. </a> You cannot change how an existing flag is set. If you need a ticket with different flags, you must get a new ticket. 102*7f2fe78bSCy Schubert<p></p> 103*7f2fe78bSCy Schubert<em> Forwardable and Proxiable</em> tickets can be forwarded to the remote host when you connect via telnet, ssh, ftp, rlogin, or similar applications. 104*7f2fe78bSCy Schubert<p></p> 105*7f2fe78bSCy Schubert<em> Renewable</em> tickets can be renewed until the time and day shown 106*7f2fe78bSCy Schubertin the Renewable Until column. Each time a ticket is renewed, its 107*7f2fe78bSCy Schubertlifetime is extended by the length of the original ticket. </td> 108*7f2fe78bSCy Schubert</tr> 109*7f2fe78bSCy Schubert 110*7f2fe78bSCy Schubert</tbody></table> 111*7f2fe78bSCy Schubert<p> 112*7f2fe78bSCy Schubert 113*7f2fe78bSCy Schubert 114*7f2fe78bSCy Schubert<script language="JavaScript"> 115*7f2fe78bSCy Schubertpopfont="Arial,.725," 116*7f2fe78bSCy SchubertpopupRealm="Kerberos realms are a way of logically grouping resources and identities that use Kerberos. Your realm is the home of your Kerberos identity and your point of entry to the network resources controlled by Kerberos. Windows calls realms 'domains.' " 117*7f2fe78bSCy SchubertpopupWideEnough="Click and drag the line to the right of the column heading to widen the column or make it narrower." 118*7f2fe78bSCy SchubertpopupPrincipal="Your principal is your Kerberos identity. It is your user name combined with the Kerberos realm you are using. For example: 'jdoe@SALES.WIDGET.COM' " 119*7f2fe78bSCy Schubert</script> 120*7f2fe78bSCy Schubert 121*7f2fe78bSCy Schubert<object id="popup" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11"> 122*7f2fe78bSCy Schubert</object> 123*7f2fe78bSCy Schubert</p></body></html> 124