[24160] in Kerberos
Re: Default ticket lifetime
daemon@ATHENA.MIT.EDU (Ryan Underwood)
Tue Jun 28 23:19:30 2005
Date: Tue, 28 Jun 2005 22:18:50 -0500
From: Ryan Underwood <nemesis-lists@icequake.net>
To: kerberos@mit.edu
Message-ID: <20050629031850.GF19748@dbz.icequake.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
In-Reply-To: <87vf3xvp73.fsf@windlord.stanford.edu>
Errors-To: kerberos-bounces@mit.edu
On Tue, Jun 28, 2005 at 08:04:16PM -0700, Russ Allbery wrote:
> Ryan Underwood <nemesis-lists@icequake.net> writes:
>
> > I'm trying to set a default ticket lifetime longer than the 10 hour
> > default in /etc/krb5.conf (without hacking the source). It appears
> > that
> > at one point there was a tkt_lifetime option, but that it was later
> > removed. Is there any way to do this in the current krb5
> > distribution
> > or any plans to implement something similar?
>
> default_lifetime in the [appdefaults] section, I believe.
I've tried this in both the appdefaults and realms sections with no
effect. Additionally, it does not turn up in a source grep.
I should mention that I am able to obtain tickets of the correct length
by using the '-l' option to kinit, so the KDC and principals are
apparently configured correctly.
--
Ryan Underwood, <nemesis@icequake.net>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
