[30732] in Kerberos
Re: How do I change the ticket lifetime in the default policy?
daemon@ATHENA.MIT.EDU (Jason Edgecombe)
Tue Feb 17 16:51:26 2009
Message-ID: <499B30EF.4090407@rampaginggeek.com>
Date: Tue, 17 Feb 2009 16:49:35 -0500
From: Jason Edgecombe <jason@rampaginggeek.com>
MIME-Version: 1.0
To: Russ Allbery <rra@stanford.edu>
In-Reply-To: <87tz6sc4az.fsf@windlord.stanford.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Russ Allbery wrote:
> Jason Edgecombe <jason@rampaginggeek.com> writes:
>
>
>> We are extending the ticket lifetime for all of the users in our realm
>> from 1 day to 7 days. We use MIT Kerberos in our realm. I know that
>> "modprinc -maxlife 7day user@REALM.COM" will extend the ticket lifetime
>> for an existing user, but how to I make it the default for new users?
>>
>
> I believe the default for new users is taken from the max_life setting in
> kdc.conf.
>
>
hmm,
my kdc.conf already has "max_life = 7d 0h 0m 0s" and the users don;t get
7 day tickets by default. Am I missing something?
Thanks,
Jason
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
