Question about how to obtain renewable ticket?

Greg Hudson ghudson at mit.edu
Mon Apr 13 17:30:46 EDT 2015


On 04/13/2015 05:13 PM, Neng Xue wrote:
> However, when I used 'kinit -r 20m', the klist -f output was:

The KDC won't issue a renewable ticket if you request a lifetime greater
than the renewable lifetime.  You could try "kinit -l 10m -r 20m", or
"kinit -r 2d" or something.

Also make sure that krbtgt/NEXUE.COM has a max renewable lifetime; the
KDC checks both the client and server principal entries.



More information about the Kerberos mailing list