Query regarding max_life.
Sam Hartman
hartmans at MIT.EDU
Fri Jun 23 13:54:09 EDT 2006
>>>>> "P" == P Santoshkumar <psantoshkumar at novell.com> writes:
P> Hello, I figured out that max_life cannot be set to 0 as the
P> ticket will not have any life time. The problem that I' am
P> facing is that I' am not able to read the max_life value which
P> will be set at the realm because if the value is not set during
P> the creation of the principal or if the value is not set in the
P> configuration file then the value is set to 1 day which means
P> that when I have to add the value from the realm I can only
P> check with respect to the non-zero value of the max_life and
P> then add from the realm if any value exists in it. So to solve
P> this problem is it fine to set the default value in LDAP as
P> that will be the final operation? Another possible way is to
P> not add any default value during the creation of the principal
P> and leave it as 0 and when we do a get_principal we can send
P> the default value instead of 0.
I wonder how hard it would be to add some way to find out if the max
life was defaulted or was actually set at a different layer.
--Sam
More information about the krbdev
mailing list