[STORM-3044] AutoTGT should ideally check if a TGT is specific to IP addresses and reject

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0
• Labels: pull-request-available
• Assignee: Ethan Li
• Reporter: Ethan Li
• Created: 26/Apr/18 18:26
• Updated: 30/Apr/18 03:24
• Resolved: 30/Apr/18 03:24

Description

There are several options that a TGT can have, one of them is being forwardable, another is having one or more IP addresses in it that make it so it cannot be used anywhere else. If the ticket is forwardable, but is tied to IP addresses it will not likely work for storm so we should reject it.

It looks like we can call getClientAddresses() on the ticket and if it returns something then we should reject it. We should also include instructions about how to get a proper ticekt in the error message.

`kinit -A -f`

Issue Links

• links to: GitHub Pull Request #2646