How do I change the ticket lifetime in the default policy?

[Russ Allbery]

Jason Edgecombe <jason at rampaginggeek.com> writes:

> We are extending the ticket lifetime for all of the users in our realm
> from 1 day to 7 days. We use MIT Kerberos in our realm. I know that
> "modprinc -maxlife 7day user at REALM.COM" will extend the ticket lifetime
> for an existing user, but how to I make it the default for new users?

I believe the default for new users is taken from the max_life setting in
kdc.conf.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>