kdb5_ldap_util, ticket policy object and kadmin

Will Fiveash William.Fiveash at sun.com
Mon Feb 13 21:42:47 EST 2006

It appears that with the LDAP KDB plugin and the kdb5_ldap_util there is
support for a Ticket Policy Object which contains the attributes:

krbmaxticketlife, krbmaxrenewableage, krbticketflags

There does not appear to be a way to create/modify this object with
kadmin, only with kdb5_ldap_util.  Am I correct?  If so, this strikes me
as inconsistent with the current kadmin interface that allows management
of passwd policy.

Will Fiveash
Sun Microsystems Inc.
Austin, TX, USA (TZ=CST6CDT)

More information about the krbdev mailing list