Changing default ticket lifetime

[Fabian Aichele]

Hello!

Thank you for the tip.
MIT Kerberos' documentation is very good, but nasty little details
like this problem aren't mentioned.
Regards,
Fabian Aichele

Marc Horowitz <marc at mit.edu> wrote in message news:<t53k7rz9iy7.fsf at horowitz-m1.mit.edu>...

> You need to increase the max lifetime of the service keys (krbtgt and
> all other service keys in your database) as well.
> 
>                 Marc
> 
> faichele at primusnetz.de (Fabian Aichele) writes:
> 
> >> Hello!
> >> 
> >> I installed and configured MIT Kerberos V without problems, and so far
> >> it works quite well. Just one problem remains: When creating my realm
> >> with kdb5_util, I accepted the default ticket lifetime of 10 hours.
> >> For security reasons this may be fine, but I'd like to increase it
> >> nevertheless. Changing the
> >> max_lifetime in my kdc.conf doesn't have any effect. I increased the
> >> ticket lifetimes of my user's principals as well, and I restarted the
> >> Kerberos daemons after changes to the configuration files.
> >> So, what am I missing?
> >> I'd appreciate any hint or tip!
> >> 
> >> Regards,
> >> Fabian Aichele