Page 1 of 1

[SOLVED] Getting Kerberos Password Expiration Date

Posted: 2019/09/06 20:02:27
by jscarville
Is there any way to get the expiration date from a Kerberos 5 KDC without entering a password a second time? I want to arrange that, when a user logs in using kerberos for authentication, the expiration date of their password is displayed.

I've searched and tried every utility I can find but, so far, no luck. Seems to me that once I have a tgt getting such information would be easy.

The KDC is using krb5-server version 1.10.3.

Re: Getting Kerberos Password Expiration Date

Posted: 2019/09/09 15:42:34
by jscarville
OK. I figured it out. The programs remctl and remctld (remctl package in EPEL) can do what asked.