We use Windows Active Directory (AD) as our Kerberos ticket granting server. The AD default is for a ticket to expire in 10 hours. A Windows PC gets a ticket when it connects to the network. When the PC starts an IBMi connection, it passes that ticket to IBMi. 10 hours after connecting to the network, the ticket expires and the PC requests a new ticket from AD. The PC does not send IBMi the new ticket. The PC connection to IBMi is fine, but QNTC requests fail.
-----Original Message-----
From: Steinmetz, Paul via MIDRANGE-L [mailto:midrange-l@xxxxxxxxxxxxxxxxxx]
Sent: Friday, March 29, 2019 10:40 AM
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxxxxxxxx>
Cc: Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>
Subject: RE: EIM/Kerberos check ticket expiration
Justin,
I've never had an issue with Kerberos ticket expiration times.
Can you elaborate on what you are seeing?
Paul
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxxxxxxxx] On Behalf Of Justin Taylor
Sent: Friday, March 29, 2019 9:05 AM
To: Midrange Systems Technical Discussion
Subject: EIM/Kerberos check ticket expiration
Is there a way to check the expiration time of a Kerberos ticket in an IBMi job when using EIM authentication?
This would be in CGI and 5250 jobs, and I'd need to check from within the jobs.
TIA
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
midrange.com
