Question about how to obtain renewable ticket?
Greg Hudson
ghudson at mit.edu
Mon Apr 13 17:30:46 EDT 2015
On 04/13/2015 05:13 PM, Neng Xue wrote:
> However, when I used 'kinit -r 20m', the klist -f output was:
The KDC won't issue a renewable ticket if you request a lifetime greater
than the renewable lifetime. You could try "kinit -l 10m -r 20m", or
"kinit -r 2d" or something.
Also make sure that krbtgt/NEXUE.COM has a max renewable lifetime; the
KDC checks both the client and server principal entries.
More information about the Kerberos
mailing list