Unable to to get a TGT that abides to specified renewal interval
vtkstef
vtkstef at gmail.com
Sat Oct 15 12:36:03 EDT 2005
Yes I have and both the krbtgt/SANTORO.ORG and the stefano principals
have ticket lifetime policies that match the KDC conf max values:
kadmin: getprinc stefano
Principal: stefano ...
...
Maximum ticket life: 0 days 10:00:00
Maximum renewable life: 7 days 00:00:00
...
Number of keys: 2
Key: vno 1, Triple DES cbc mode with HMAC/sha1, no salt
Key: vno 1, DES cbc mode with CRC-32, no salt
Attributes:
Policy: [none]
kadmin: getprinc krbtgt/SANTORO.ORG
Principal: krbtgt/SANTORO.ORG...
...
Maximum ticket life: 0 days 10:00:00
Maximum renewable life: 7 days 00:00:00
....
Number of keys: 2
Key: vno 1, Triple DES cbc mode with HMAC/sha1, no salt
Key: vno 1, DES cbc mode with CRC-32, no salt
Attributes:
Policy: [none]
More information about the Kerberos
mailing list