Listing Kerberos Tickets Granted To Clients - Acopia Adaptive Resource Switch Cli Maintenance Manual

Troubleshooting CIFS Services

Listing Kerberos Tickets Granted to Clients

Listing Kerberos Tickets Granted to Clients
bstnA6k> show cifs-service kerberos-tickets ac1.medarch.org
Service: ac1.medarch.org
Start Time(UTC)
--------------------------------------------------------------------------------
Principal: juser@MEDARCH.ORG
06/07/06 21:06:10
Renew Til:
06/07/06 21:06:36
9-14
If Kerberos is active for this CIFS service, the service passes Kerberos tickets to
clients who successfully authenticate. The CIFS service caches the Kerberos tickets
on behalf of its clients. These tickets have an expiration time. To view all cached
tickets, the clients who hold the tickets, and the expiration times, use the
cifs-service kerberos-tickets
show cifs-service kerberos-tickets {fqdn | all}
where fqdn | all is a required choice:
fqdn (1-128 characters) is the fully-qualified domain name (for example,
www.company.com) for the CIFS service's global server.
all selects all CIFS services on the current switch.
The output refers to a client as a Principal and a server or Ticket-Granting Ticket as a
Service Principal. For each principal with a Kerberos ticket, this shows the contents
of all tickets (including grant times and expiration times). The total number of
principals, ticket-granting tickets, and service tickets appears at the end. If you select
all, each CIFS service has a separate section with the totals at the end.
For example, this finds that the "ac1.medarch.org" service has granted tickets to one
principal, "juser@MEDARCH.ORG:"
Expiry Time(UTC)
06/08/06 07:06:10
06/14/06 21:06:10
06/08/06 07:06:10
command:
Service Principal
krbtgt/MEDARCH.ORG@MEDARCH.ORG
cifsslave$@MEDARCH.ORG
show
CLI Maintenance Guide