[30730] in Kerberos
How do I change the ticket lifetime in the default policy?
daemon@ATHENA.MIT.EDU (Jason Edgecombe)
Tue Feb 17 12:43:08 2009
Message-ID: <499AF6FE.8070302@rampaginggeek.com>
Date: Tue, 17 Feb 2009 12:42:22 -0500
From: Jason Edgecombe <jason@rampaginggeek.com>
MIME-Version: 1.0
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi everyone,
We are extending the ticket lifetime for all of the users in our realm
from 1 day to 7 days. We use MIT Kerberos in our realm. I know that
"modprinc -maxlife 7day user@REALM.COM" will extend the ticket lifetime
for an existing user, but how to I make it the default for new users?
To handle our existing users, I plan to script the modprinc command for
all of our users. the users have a mix of ticket lifetimes from 1day to
7 days. Is there a more elegant way than to run modprinc on everybody?
Thanks,
Jason
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
