Default ticket lifetime

Russ Allbery rra at stanford.edu
Tue Jun 28 23:49:34 EDT 2005


Ryan Underwood <nemesis-lists at icequake.net> writes:

> I've tried this in both the appdefaults and realms sections with no
> effect.  Additionally, it does not turn up in a source grep.

> I should mention that I am able to obtain tickets of the correct length
> by using the '-l' option to kinit, so the KDC and principals are
> apparently configured correctly.

Ah, hm.

#if 0
        /* Default ticket lifetime is currently not supported */
        profile_get_integer(ctx->profile, "libdefaults", "tkt_lifetime",
                            0, 10 * 60 * 60, &tmp);
        ctx->tkt_lifetime = tmp;
#endif

(src/lib/krb5/krb/init_ctx.c).  It looks like they might not have ever
been really supported?

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>


More information about the Kerberos mailing list