Ticket lifetimes > 10 hrs?

Ken Hornstein kenh at cmf.nrl.navy.mil
Thu Nov 14 13:17:42 EST 2002


>I seem to be having the same problem.  I'm running krb5-1.2.5.  I changed my
>kdc.conf so that max_life = 25h 0m 0s.  I then restarted kadmind and created
>a test principal.  Sure enough, its max life was 25 hours.  But when I did a
>'kinit -l 20h' for the principal, I got a TGT which would expire in 10 hours!
>
>I took a look at the max life for my krbtgt/<REALM> and it's 21:15:00 (which
>is what it was before I changed kdc.conf).  So, what else should I be looking
>at?

Did you restart your KDC as well?

--Ken



More information about the Kerberos mailing list