Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking for a way to obtain a tgt (ticket granting ticket) from a second kerberos principal. In my job I work with a regular PC (member of AD) from our university's it departement but I also manage a lab with it's own AD. To make the daily use much easier I consider it a rather nice option to have another tgt on my Windows 7 machine. On an *nix I'd use kinit - but on Windows...? Thank you for your support

share|improve this question
I haven't tried it - but maybe the MIT Kerberos tools provide some way to do this? – dsolimano Jun 29 '12 at 12:46 doesn't seem to offer v5-binaries for windows - I guess because Kerberos is part of the OS... – CHfish Jun 29 '12 at 16:59
Are you sure? I downloaded and the documentation talks about v5 and the NIM lists the TGT for solimanod@FOOBAR.COM as being Kerbeors v5, with the various cifs/sql tickets below that. But, I don't know that if you obtain new credentials, Windows will use those. – dsolimano Jun 29 '12 at 18:24
up vote 1 down vote accepted

If you start a new shell (cmd.exe) under the alternate domain account using runas.exe, that will have its own security context and credential cache for the corresponding Kerberos principal, which programs you start from it will inherit.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .