dont work lifetime options

Greg Hudson ghudson at MIT.EDU
Thu Aug 29 15:29:32 EDT 2013


On 08/29/2013 07:36 AM, Sergey S. Belonin wrote:
> please help configure lifetime > 10days and enable renewal finctional

The lifetime of initial tickets is determined by the minimum of:

* The lifetime in the request
* The maximum lifetime of the client principal
* The maximum lifetime of the server principal (krbtgt/REALM at REALM)
* The maximum lifetime of the realm as configured in krb5.conf

>From your mail, it sounds like you might not have increased the maximum
lifetime on the krbtgt/REALM principal.



More information about the Kerberos mailing list