default ticket lifetime

[Klaas Hagemann]

Jens Kleineheismann schrieb:
> Hi there,
Hi Jens,

there are tree points where the ticket lifetime is defined:
1. kdc.conf, you checked this
2. the principals, you checked this as well
3. the /etc/krb5.conf on the client side.
There you can define a default ticket lifetime.

In the section [libdefaults] you can set
ticket_lifetime = <<ticket lifetime in seconds>>

Anyway the lowest value always wins.

Klaas
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>