Expired tickets not renewed

Victor Sudakov <[email protected]> Tue, 8 Aug 2017 15:54:10 +0700

Newsgroups	gmane.comp.encryption.kerberos.heimdal.general
Organization	AO "Svyaztransneft", SibPTUS
Message-ID	<[email protected]>

Dear Colleauges,

I have a perfectly valid TGT and some expired service tickets (see the
klist output below). When I ssh to techno2 or fs01, the ssh client
asks me for the password. Why does it happen? 

I expect that the ssh client should request a new service ticket for
the relevant host, and not just give up?


Credentials cache: FILE:/tmp/krb5cc_3001
        Principal: [email protected]

  Issued                Expires               Principal
Aug  7 08:27:14 2017  Aug 14 08:27:14 2017  krbtgt/[email protected]
Aug  7 08:27:16 2017  >>>Expired<<<         host/[email protected]
[...]
Aug  7 11:01:56 2017  >>>Expired<<<         host/[email protected]
Aug  7 11:01:56 2017  >>>Expired<<<         host/[email protected]
Aug  7 12:58:54 2017  >>>Expired<<<         host/[email protected]
Aug  7 12:58:54 2017  >>>Expired<<<         host/[email protected]


-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
AS43859