[WinPartners] Kerberos tickets never expire (?)

[Eduardo Gonzalez]

Thanks for the suggestion (much simpler fix than editing all those fields I referred to in my previous email). In retrospect, there is no good reason to be paranoid about having tickets that "last" weeks and weeks. In fact, after reading the input from other Winpartners, its probably better to have them renew automatically, so as to not lose connectivity to my home directory, corrupt win profiles, etc. I suppose I could always make a shortcut to destroy tickets and put it on the desktop, and click on it before I go home. I was basically confused, and more thorough documentation could have helped me... I just didn't know where to look. In the end it was a learning experience.  Thanks to you all...!

Eduardo

At 01:43 PM 8/12/2004, Jonathan McIndoe Hunt wrote:
>Hi Eduardo,
>
>The default behavior for Kerberos for Windows including 2.6.3 is tickets are renewable and if you leave your machine logged on, the tickets will automatically renew for up to the maximum time set.
>
>You can turn this off by going to Leash -> Options -> Kerberos v5 Properties, selecting the Configuration Options tab and then unchecking the "Renewable" box for ticket options.
>
>You should destroy and re-acquire tickets for the setting to be in place for your current tickets.
>
>The setting Paul Dzus was talking about for maximum ticket lifetime can be gotten to from the Options menu under Kerberos Properties and clicking on the Ticket Lifetime and Other Initialization Options tab.
>
>Let me know if this does not address your problem.
>
>Jon