About Tickets

The MIT Kerberos program helps you manage your Kerberos tickets. Click the Get Ticket button and enter your principal (your Kerberos identity) and password to obtain a ticket. The ticket allows you to securely access all of the computers and services set up to authenticate you through Kerberos, until the ticket expires, without requiring you to enter your password again.

On this pageOn other pages
Learn about... How to...

Ticket Expiration
Your tickets are valid for a set amount of time before they expire and cannot be used again. Usually tickets are valid for around the length of a work day (e.g., 8 hours). A pop up window warns you 15, 10, and 5 minutes before your tickets expire. To add an audible alarm at the same intervals, go to the Options tab and select Expiration Alarm in the Ticket Options panel.
AdjustView
When you get your ticket, click Show Advanced to view and adjust the ticket's lifetime. Note that some Kerberos installations will not allow you to adjust the ticket lifetime.
How to: Get Tickets
The main window includes a Valid Until column for each of your tickets. After the time listed in this column, the ticket will expire and you must get a new ticket to access network resources that use Kerberos.
How to: View Tickets

Back to Top

Renewable Tickets
When you get your ticket, you have the option of flagging the ticket as renewable. Renewable tickets allow you to run batch jobs without interruption and to work through a long session without continually reentering your password.

Renewable Ticket Expiration Renewable tickets have a normal ticket lifetime, but they also have a renewable lifetime that is much longer (usually several days). Each time you renew your ticket, Kerberos resets the ticket lifetime to the length of the original ticket. You can renew the ticket as often as you need to (once at time or automatically) until the renewable lifetime is reached. Then you must obtain a new ticket.
Obtain Renewable Tickets When you get your ticket, click Show Advanced and then select Renewable under "Flag this ticket as." Use the Renewable Until slider to adjust the ticket's renewable lifetime.
How to: Get Tickets
Renew Once Click the Renew button. Note that you cannot renew expired tickets even if the ticket is still within its renewable lifespan.
How to: Renew Ticket Once
Renew Automatically Go to the Options tab and select Automatic Ticket Renewal in the Ticket Options panel. Note that MIT Kerberos must be active and running in order to renew tickets. This means that if your machine is in hibernation mode or if MIT Kerberos is not running when it is time to renew your tickets, your tickets will not be renewed.
How to: Renew Tickets Automatically
View In the Options tab, the View Options panel checkboxes control what information is displayed for your tickets. Two columns relate to renewable tickets: Renewable Until and Flags.

To see the date and time your renewable tickets expire and can no longer be renewed, go to the Options tab and select the Renewable Until checkbox in the View Options panel. To see which of your tickets are renewable, select Flags.
How to: View Tickets

Back to Top

Forwardable Tickets
When you get your ticket, you have the option of flagging the ticket as forwardable and proxiable. Forwardable and proxiable tickets can be forwarded to the remote host when you connect via telnet, ssh, ftp, rlogin, or similar applications, so you will not need to get new tickets to use remote services.
Obtain Forwardable Tickets View
When you get your ticket, click Show Advanced and then select Forwardable and Proxiable under "Flag this ticket as."
How to: Get Tickets
In the Options tab, the View Options panel checkboxes control what information is displayed for your tickets. Select the Flags checkbox to open a column indicating which of your tickets are forwardable.
How to: View Tickets

Back to Top