Unable to to get a TGT that abides to specified renewal interval

vtkstef vtkstef at gmail.com
Sat Oct 15 12:36:03 EDT 2005


Yes I have and both the krbtgt/SANTORO.ORG and the stefano principals
have ticket lifetime policies that match the KDC conf max values:

kadmin:  getprinc stefano
Principal: stefano ...
...
Maximum ticket life: 0 days 10:00:00
Maximum renewable life: 7 days 00:00:00
...
Number of keys: 2
Key: vno 1, Triple DES cbc mode with HMAC/sha1, no salt
Key: vno 1, DES cbc mode with CRC-32, no salt
Attributes:
Policy: [none]
kadmin:  getprinc krbtgt/SANTORO.ORG
Principal: krbtgt/SANTORO.ORG...
...
Maximum ticket life: 0 days 10:00:00
Maximum renewable life: 7 days 00:00:00
....
Number of keys: 2
Key: vno 1, Triple DES cbc mode with HMAC/sha1, no salt
Key: vno 1, DES cbc mode with CRC-32, no salt
Attributes:
Policy: [none]



More information about the Kerberos mailing list