kwc at citi.umich.edu
Mon Oct 25 16:46:21 EDT 2004
> > Also check the properties on the client and service principals
> > (including the krbtgt principals). I forget whether max renewable
> > lifetime is one of them, but if it is, it would be set when the
> > principal is created or when you use "modprinc" in kadmin, and the
> > config file specifications won't extend it, only (potentially) further
> > limit it.
> You had me all excited for a minute... but no:
> kadmin: getprinc phil
> Maximum renewable life: 7 days 00:00:00
That's the client. What about
getprinc krbtgt/ISD.USC.EDU at ISD.USC.EDU ?
More information about the Kerberos