Connected: An Internet Encyclopedia
2.2. Invalid tickets

Up: Connected: An Internet Encyclopedia
Up: Requests For Comments
Up: RFC 1510
Up: 2. Ticket flag uses and requests
Prev: 2.1. Initial and pre-authenticated tickets
Next: 2.3. Renewable tickets

2.2. Invalid tickets

2.2. Invalid tickets

The INVALID flag indicates that a ticket is invalid. Application servers must reject tickets which have this flag set. A postdated ticket will usually be issued in this form. Invalid tickets must be validated by the KDC before use, by presenting them to the KDC in a TGS request with the VALIDATE option specified. The KDC will only validate tickets after their starttime has passed. The validation is required so that postdated tickets which have been stolen before their starttime can be rendered permanently invalid (through a hot- list mechanism).


Next: 2.3. Renewable tickets

Connected: An Internet Encyclopedia
2.2. Invalid tickets