ticket lifetime -- I must be overlooking something

Ken Hornstein kenh at cmf.nrl.navy.mil
Fri Apr 12 13:30:22 EDT 2002


>kinit -l 24h gives longer tickets by now. But kinit (without options)
>or pam do not. 
>
>> Make sure that "kinit -l 300h" shows a longer ticket lifetime as well;
>> maybe PAM isn't picking up those entries.
>
>This seems to be a client-side issue by now. Where does kinit takes it
>defaults from? 

I think this varies between MIT releases; I suspect your best bet is to
dig down into the source code for your release to figure it out.

--Ken



More information about the Kerberos mailing list