Renewable Tickets

[Kevin Coffman]

> > Also check the properties on the client and service principals
> > (including the krbtgt principals).  I forget whether max renewable
> > lifetime is one of them, but if it is, it would be set when the
> > principal is created or when you use "modprinc" in kadmin, and the
> > config file specifications won't extend it, only (potentially) further
> > limit it.
> 
> You had me all excited for a minute... but no:
> 
> kadmin:  getprinc phil
> ...
> Maximum renewable life: 7 days 00:00:00


That's the client.  What about
getprinc krbtgt/ISD.USC.EDU at ISD.USC.EDU  ?