[30731] in Kerberos
Re: How do I change the ticket lifetime in the default policy?
daemon@ATHENA.MIT.EDU (Russ Allbery)
Tue Feb 17 13:25:15 2009
To: Jason Edgecombe <jason@rampaginggeek.com>
In-Reply-To: <499AF6FE.8070302@rampaginggeek.com> (Jason Edgecombe's message
of "Tue\, 17 Feb 2009 12\:42\:22 -0500")
From: Russ Allbery <rra@stanford.edu>
Date: Tue, 17 Feb 2009 10:21:40 -0800
Message-ID: <87tz6sc4az.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Jason Edgecombe <jason@rampaginggeek.com> writes:
> We are extending the ticket lifetime for all of the users in our realm
> from 1 day to 7 days. We use MIT Kerberos in our realm. I know that
> "modprinc -maxlife 7day user@REALM.COM" will extend the ticket lifetime
> for an existing user, but how to I make it the default for new users?
I believe the default for new users is taken from the max_life setting in
kdc.conf.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
