How do I change the ticket lifetime in the default policy?

[Jason Edgecombe]

Russ Allbery wrote:
> Jason Edgecombe <jason at rampaginggeek.com> writes:
>
>   
>> We are extending the ticket lifetime for all of the users in our realm
>> from 1 day to 7 days. We use MIT Kerberos in our realm. I know that
>> "modprinc -maxlife 7day user at REALM.COM" will extend the ticket lifetime
>> for an existing user, but how to I make it the default for new users?
>>     
>
> I believe the default for new users is taken from the max_life setting in
> kdc.conf.
>
>   
hmm,

my kdc.conf already has "max_life = 7d 0h 0m 0s" and the users don;t get
7 day tickets by default. Am I missing something?

Thanks,
Jason