[22862] in Kerberos
Maximum ticket lifetimes?
daemon@ATHENA.MIT.EDU (Eric Jonas)
Fri Nov 19 12:24:34 2004
Date: Thu, 18 Nov 2004 08:59:41 -0500 (EST)
From: Eric Jonas <jonas@mit.edu>
To: kerberos@mit.edu
Message-ID: <Pine.LNX.4.58L.0411180853320.23207@amalgam.mit.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: kerberos-bounces@mit.edu
I have deployed an MIT kerberos KDC in my lab, and am attempting to
lengthen the ticket lifetime to a full day (this is using debian stable,
kerberos version 1.2.4-5woody6).
I've edited /etc/krb5kdc/kdc.conf to have max_life = 24h
and via kadmin:
modprinc -maxlife "1 day" krbtgt/MWL.AI.MIT.EDU@MWL.AI.MIT.EDU
modprinc -maxlife "1 day" jonas@MWL.AI.MIT.EDU
getprinc shows that both of these were successful. Then I restarted the
kdc and kdc-admin processes on the kdc.
I'm really stumped at this point because all the mailing list posts with
these questions highlighted the importance of changing the maximum life on
the above tickets as well as the kdc, which I've done.
Is there something obvious I'm missing, or someplace I should look for
more data? Also, is there someplace I can set the "24h" to be the maximum
lifetime for all tickets created in the future?
Thanks,
...Eric Jonas
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
