Ticket lifetimes > 10 hrs?
RCU
nemesis at icequake.no_spam.net
Tue Nov 12 22:02:34 EST 2002
Using MIT krb5, debian packages version 1.2.6-1. Is there any way to set
the ticket lifetimes greater than 10 hours? I have modified:
- kdc.conf on the KDC
max_life = 7d 0h 0m 0s
max_renewable_life = 7d 0h 0m 0s
- krb5.conf on the client
[libdefaults]
ticket_lifetime = 7d
... also tried
ticket_lifetime = 360000
- policies on the user's principal, the tgt principal, the krbadm
principal, K/M, and afs all @REALM. All set to maxlife 30 days and
maxrenewlife 30 days.
I have also tried specifying kinit -l 7d -- seems that no matter what I
do, I get 10 hour tickets and AFS tokens for same.
Any ideas?
More information about the Kerberos
mailing list