Max renewable lifetime issues

Matt Garman matthew.garman at
Wed Mar 13 11:11:53 EDT 2013

On Wed, Mar 13, 2013 at 4:47 AM, Tiago Elvas <tiagoelvas at> wrote:
> I am having a problem in my system which I do not understand why it's
> happening.
> Firstly, I have a KDC running on a RedHat 5.7 machine. I have the parameter
> maximum_renewable_life as 5000days in kdc.conf and krb5.conf. For each user
> I have added, I also configured as 5000days max_renewable_life.
> However, I am experiencing two different situations:
>    1. In Linux clients, I only have 1000days as max_renewable_life.
>    2. In windows clients (kerberos for windows), I am getting only 30
>    days..!?
> Does anybody know what is causing this?

I don't any any experience with Kerberos on Windows.  But I did face a
similar problem on the Linux side.  The following ServerFault question
was immensely helpful to me:


More information about the Kerberos mailing list