Renewable Tickets

[Phil Dibowitz]

On Mon, Oct 25, 2004 at 01:51:04PM -0700, Phil Dibowitz wrote:
> 
> Aha!
> 
> Maximum renewable life: 0 days 00:00:00
> 
> So... "krbtgt" is the principal for... the domain? I'm still catching up on
> Kerberos here.
> 
> so a 
>   modprinc -maxrenewlife 7d krbtgt/ISD.USC.EDU at ISD.USC.EDU
> 
> Should fix this?

To report, yes that did fix it. It turns out "7d" isn't valid, but "7 days"
is.

So a simple:
   modprinc -maxrenewlife 7days krbtgt/ISD.USC.EDU at ISD.USC.EDU

Did the trick. Things work perfectly now. Thanks so much for everyone's help!

-- 
Phil Dibowitz
Systems Architect and Administrator
Enterprise Infrastructure / ISD / USC
UCC 174 - 213-821-5427

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20041025/06727a7b/attachment.bin