Ticket lifetimes > 10 hrs?

bbense+comp.protocols.kerberos.Nov.13.02@telemark.stanford.edu bbense+comp.protocols.kerberos.Nov.13.02 at telemark.stanford.edu
Wed Nov 13 19:18:25 EST 2002


-----BEGIN PGP SIGNED MESSAGE-----

In article <pan.2002.11.13.23.10.31.779572 at icequake.no_spam.net>,
RCU <nemesis at icequake.no_spam.net> wrote:
>> I would expect using kinit -l to work.  I believe there is a bug and
>> the default_lifetime in krb5.conf is ignored.
>> 
>> However kinit -l  should work.
>> Confirm that you can do something like 
>> kinit -l 22:00:00
>> I know that works
>
>Hrm, still 10 hours for me here.  What are some common things to overlook
>in this setup?  I guarantee I've probably overlooked one. :P
>

- - Check the configuration of the kdc. It may be set up to only
  allow a maximum ticket lifetime of ten hours. 

- - Booker C. Bense 


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBPdLr0GTWTAjn5N/lAQGUQgP+Phy4mAFVF40tHByjXLzTT5fJaTehczFB
CWWBIPFgmMazaKIX5EXhwzt6f5R8F9Pn5SbqPB61VWLizAe0KJ/5X5gog8AnsiN0
n4M05s/DT6ax1t+On7/u49YohKzwMMnTQlLl8vc5eo1Pi8K1uzXWO9+Mo6IZ8H9l
AhKfoNZxZ3w=
=LyKT
-----END PGP SIGNATURE-----



More information about the Kerberos mailing list