[Freeipa-users] Strange klist output

[John Dennis]

On 02/25/2012 07:53 AM, Marco Pizzoli wrote:
> Hi, as you know I'm working with FreeIPA 2.1.90.
>
> By following documentation I checked my tickets by issuing the klist
> command but I'm obtaining an output slightly different than the one on
> the doc.
>
> [root at freeipa01 ~]# klist -kt /etc/krb5.keytab
> Keytab name: WRFILE:/etc/krb5.keytab
> KVNO Timestamp         Principal
> ---- -----------------
> --------------------------------------------------------
>     2 02/15/12 18:28:58 host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT
> <mailto:freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT>
>     2 02/15/12 18:28:58 host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT
> <mailto:freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT>
>     2 02/15/12 18:28:58 host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT
> <mailto:freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT>
>     2 02/15/12 18:28:58 host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT
> <mailto:freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT>
>     2 02/15/12 18:28:58 host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT
> <mailto:freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT>
>     2 02/15/12 18:28:58 host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT
> <mailto:freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT>
>
> I see 6 rows as duplicated. Is it normal? Please, could you explain what
> is happening?

I believe that is due to the new s4u2proxy kerberos implmentation, I've 
seen it too while testing with s4u2proxy. Unfortunately I cannot explain 
it either and would love for one of our Kerberos gurus to provide an 
explanation.

John


-- 
John Dennis <jdennis at redhat.com>

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/