Unable to get max_life to work over 24 hours

Tony Lill ajlill at ajlc.waterloo.on.ca
Sun Oct 5 01:04:39 EDT 2003

You're missing the fact that the max life is hard coded, and any
suggestion in the documentation that it's configurable is a bald-faced
lie! If you want 3 days, you'll have to compile your own.
Tony Lill,                         Tony.Lill at AJLC.Waterloo.ON.CA
President, A. J. Lill Consultants        fax/data (519) 650 3571
539 Grand Valley Dr., Cambridge, Ont. N3H 2S2     (519) 241 2461
--------------- http://www.ajlc.waterloo.on.ca/ ----------------
"Welcome to All Things UNIX, where if it's not UNIX, it's CRAP!"

Kreitzer, Ray <Ray.Kreitzer at dcsg.com> wrote:

    Ray> I am running MIT Kerberos v5-1.2.8.   I am attempting to obtain a ticket
    Ray> with a life of  3 days.  I have set the max_life = 3d in the kdc.conf and
    Ray> have set the maxlife in the principal to 3d.  I run the kinit -l 3d but it
    Ray> seems I can never get a ticket for more than 24 hours.  What am I missing?  

    Ray> ___________________________________

    Ray> Ray Kreitzer 
    Ray> Sr. Database Administrator 
    Ray> Dick's Sporting Goods 
    Ray> 200 Industry Drive - RIDC Park West - Pittsburgh, PA  15275 
    Ray> Phone (412) 809-0100 x3418  Fax (412) 809-0821 
    Ray> Email   ray.kreitzer at dcsg.com 

    Ray> ________________________________________________
    Ray> Kerberos mailing list           Kerberos at mit.edu
    Ray> https://mailman.mit.edu/mailman/listinfo/kerberos

More information about the Kerberos mailing list