[WinPartners] Kerberos tickets never expire (?)

[Jonathan McIndoe Hunt]

Hi Eduardo,

The default behavior for Kerberos for Windows including 2.6.3 is tickets 
are renewable and if you leave your machine logged on, the tickets will 
automatically renew for up to the maximum time set.

You can turn this off by going to Leash -> Options -> Kerberos v5 
Properties, selecting the Configuration Options tab and then unchecking the 
"Renewable" box for ticket options.

You should destroy and re-acquire tickets for the setting to be in place 
for your current tickets.

The setting Paul Dzus was talking about for maximum ticket lifetime can be 
gotten to from the Options menu under Kerberos Properties and clicking on 
the Ticket Lifetime and Other Initialization Options tab.

Let me know if this does not address your problem.

Jon
__________________________________________
Jonathan McIndoe Hunt     617.253.0172
Manager Software Services
Client Support Services
Information Services & Technology, MIT
http://web.mit.edu/ist/topics/software/


At 10:57 AM 8/11/2004, Eduardo Gonzalez wrote:
>Dear Computing Help Desk,
>
>Is it my machine or has anyone seen this? Ever since installing the new 
>version of Kerberos (version 2.6.3; Windows XP Pro), my tickets apparently 
>never expire. For example, when I come back from the weekend my tickets 
>are still valid and when I open Eudora my email just downloads! It happens 
>every morning. Should I be surprised by this..? I don't remember reading 
>anything in the release notes as to this change in behavior, and I'm 
>concerned for obvious reasons. I haven't looked at its settings because I 
>wanted to run this by you first.
>
>Eduardo
>
>_______________________________________________
>winpartners mailing list
>winpartners at mit.edu
>http://mailman.mit.edu/mailman/listinfo/winpartners