Ticket lifetimes > 10 hrs?

RCU nemesis at icequake.no_spam.net
Tue Nov 12 22:02:34 EST 2002


Using MIT krb5, debian packages version 1.2.6-1. Is there any way to set
the ticket lifetimes greater than 10 hours?  I have modified:

- kdc.conf on the KDC
        max_life = 7d 0h 0m 0s
        max_renewable_life = 7d 0h 0m 0s

- krb5.conf on the client 
[libdefaults]
ticket_lifetime = 7d
... also tried
ticket_lifetime = 360000

- policies on the user's principal, the tgt principal, the krbadm
principal, K/M, and afs all @REALM.  All set to maxlife 30 days and
maxrenewlife 30 days.

I have also tried specifying kinit -l 7d  -- seems that no matter what I
do, I get 10 hour tickets and AFS tokens for same.

Any ideas?



More information about the Kerberos mailing list