[22748] in Kerberos
Re: Renewable Tickets
daemon@ATHENA.MIT.EDU (Phil Dibowitz)
Mon Oct 25 16:16:18 2004
Date: Mon, 25 Oct 2004 13:13:45 -0700
From: Phil Dibowitz <phil@usc.edu>
To: Rachel Elizabeth Dillon <red@mit.edu>
Message-ID: <20041025201345.GX26380@usc.edu>
Mime-Version: 1.0
In-Reply-To: <20041025200743.GH300@yiff.mit.edu>
cc: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============66595208825825347=="
Errors-To: kerberos-bounces@mit.edu
--===============66595208825825347==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="Y4boDI4qtfRSgKqE"
Content-Disposition: inline
--Y4boDI4qtfRSgKqE
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Mon, Oct 25, 2004 at 04:07:43PM -0400, Rachel Elizabeth Dillon wrote:
> Do you have something like this in /etc/krb5kdc/kdc.conf (or wherever=20
> your kdc configuration files live) :
>=20
> max_renewable_life =3D 7d 0h 0m 0s
Yup - from my original post:
My kdc.conf has (among other things):
max_life =3D 10h 0m 0s
max_renewable_life =3D 7d 0h 0m 0s
default_principal_flags =3D +forwardable,+renewable
> ? I don't have anything in my /etc/krb5.conf about renewable times,
> and I can kinit -R successfully. Other than that my configuration is
I wouldn't think anything would be needed in krb5.conf either, but I was
desperate.
> out of the box MIT Kerberos, at least with regard to renewable tickets.
> Were I on your position, I would try taking out all of the extra lines
> about renewable tickets, restart everything, and try again; I think
> renewable tickets work by default, based on the documentation I just
> went and glanced at.=20
I did. I stripped krb5.conf down and tried again... same thing.
--=20
Phil Dibowitz
Systems Architect and Administrator
Enterprise Infrastructure / ISD / USC
UCC 174 - 213-821-5427
--Y4boDI4qtfRSgKqE
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
iD8DBQFBfV557lkZ1Iyv898RApQRAKC3PoIA0576t0rZt1829lKlEyWbtwCcChp/
zcjSmI4tksUJ+B/AG1oCKW0=
=DC10
-----END PGP SIGNATURE-----
--Y4boDI4qtfRSgKqE--
--===============66595208825825347==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============66595208825825347==--
