>> - max_life in kdc.conf >> - Restart kdc >> - desired lifetime on both client and krbtgt principal > >- I've seen this question a least 3-4 times on the list. >Is it in the FAQ? No, but it should be. Another one for the list ... --Ken