Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Please see the Cloudera blog for information on the Cloudera Response to CVE-2021-4428

Renew Kerberos ticket

Explorer

Hello Everyone,

How can we renew the kerberos ticket from both MIT as well as AD kerberos

whats the step?

 

 

 

Thanks in Advance

Nilesh

2 ACCEPTED SOLUTIONS

Accepted Solutions

Super Collaborator

@Nil_kharat   To renew the Kerberos ticket, run kinit and specify both the keytab file and the principal:

 

# kinit -kt <keytab> <Principal>

Example:
# kinit -kt user1.keytab user1@EXAMPLE.COM

 

View solution in original post

Super Collaborator

@Nil_kharat Ticket lifetime is set in kerberos configuration file krb5.conf in MIT kerberos,

You can check the lifetime of the ticket using # klist command after doing kinit 

 

You can still specify the lifetime of the ticket using -l option as shown  below

# kinit -l 30m -kt <Keytab> <principal>

Example:
kinit -l 30m -kt sai.keytab sai@SUPPORTLAB.CLOUDERA.COM

 

View solution in original post

3 REPLIES 3

Super Collaborator

@Nil_kharat   To renew the Kerberos ticket, run kinit and specify both the keytab file and the principal:

 

# kinit -kt <keytab> <Principal>

Example:
# kinit -kt user1.keytab user1@EXAMPLE.COM

 

View solution in original post

Explorer

Thanks @Scharan 

How can we specify the duration for that ticket

Super Collaborator

@Nil_kharat Ticket lifetime is set in kerberos configuration file krb5.conf in MIT kerberos,

You can check the lifetime of the ticket using # klist command after doing kinit 

 

You can still specify the lifetime of the ticket using -l option as shown  below

# kinit -l 30m -kt <Keytab> <principal>

Example:
kinit -l 30m -kt sai.keytab sai@SUPPORTLAB.CLOUDERA.COM

 

View solution in original post