Categories
SysOps

How to renew Kerberos ticket

Renew Kerberos ticket.

List cached Kerberos tickets.

$ klist 
Ticket cache: KEYRING:persistent:10000:krb_ccache_Nv2FjQZ
Default principal: octo@OCTOCAT.LAB

Valid starting       Expires              Service principal
10/03/2021 18:06:02  10/04/2021 04:06:02  krbtgt/OCTOCAT.LAB@OCTOCAT.LAB
        renew until 10/04/2021 18:06:02

This ticket is valid till 4th October 04:06 and can be renewed up to 4th October 18:06, but it needs to be done before it expires.

Requests renewal of the ticket.

$ kinit -R

On 3rd October 22:24 the ticked was extended till 4th October 08:24.

$ klist 
Ticket cache: KEYRING:persistent:10000:krb_ccache_Nv2FjQZ
Default principal: octo@OCTOCAT.LAB

Valid starting       Expires              Service principal
10/03/2021 22:24:16  10/04/2021 08:24:16  krbtgt/OCTOCAT.LAB@OCTOCAT.LAB
        renew until 10/04/2021 18:06:02

After the expiration date, the ticket cannot be renewed as I mentioned earlier.

$ date
Mon 04 Oct 2021 09:03:20 AM CEST
$ kinit -R
kinit: No credentials cache found while renewing credentials

Obtain and cache new Kerberos ticket.

$ kinit 
Password for octo@OCTOCAT.LAB: **********

That is all.