Path: utzoo!attcan!uunet!lll-winken!csd4.milw.wisc.edu!mailrus!purdue!decwrl!shelby!ATHENA.MIT.EDU!jon
From: jon@ATHENA.MIT.EDU (Jon Rochlis)
Newsgroups: comp.protocols.kerberos
Subject: Re: Problem with -x option on rlogin
Message-ID: <8903280110.AA08853@SAND.MIT.EDU>
Date: 28 Mar 89 01:10:18 GMT
References: <8903272156.AA05977@csed-55>
Sender: daemon@shelby.Stanford.EDU
Organization: The Internet
Lines: 20


It ought to be logged ... from check_princ in src/server/kerberos.c ...

    /* make sure the service hasn't expired */
    if ((u_long) p->exp_date < (u_long) kerb_time.tv_sec) {
	/* service did expire, log it */
	lt = klog(L_ERR_SEXP,
	    "EXPIRED \"%s\" \"%s\"  %s", p->name, p->instance,
	     stime(&(p->exp_date)), 0);
	return KERB_ERR_NAME_EXP;
    }


The only services it could be looking for (off the top of my head)
should be rcmd.csed-2 and possibly some krbtgt if you're in a
different realm.

Do you get different results if you don't use -x ?

		-- Jon