ticket lifetimes

Ken Grady klg at lanl.gov
Tue May 21 15:22:42 EDT 2002


    The most common problem with ticket lifetimes is not setting the
krbtgt/realm at realm
kadmin.local -q 'modprinc  -maxlife "1 days" krbtgt/lanl.gov'
kadmin.local -q 'modprinc  -maxlife "14 days" klg'
kinit -l 100h
klist
Ticket cache: FILE:/tmp/krb5cc_0_4qDoTn
Default principal: klg at lanl.gov

Valid starting     Expires            Service principal
05/21/02 13:21:42  05/22/02 13:21:42  krbtgt/lanl.gov at lanl.gov






More information about the Kerberos mailing list