[22963] in Kerberos
Re: problem with ticket lifetime
daemon@ATHENA.MIT.EDU (FM)
Wed Dec 1 15:29:32 2004
Message-ID: <41AE26C4.30508@lexum.umontreal.ca>
Date: Wed, 01 Dec 2004 15:17:08 -0500
From: FM <dist-list@lexum.umontreal.ca>
MIME-Version: 1.0
To: Kenneth Grady <klg@lanl.gov>
In-Reply-To: <1101931516.11389.30.camel@grady.lanl.gov>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
cc: Mailing List Kerberos <kerberos@mit.edu>
Errors-To: kerberos-bounces@mit.edu
grep max kdc.conf
max_life = 7d 0h 0m 0s
max_renewable_life = 10d 0h 0m 0s
getprinc kadmin.local -q "getprinc kadmin/admin@REALM"
Maximum ticket life: 7 days 00:00:00
Maximum renewable life: 10 days 00:00:00
getprinc krbtgt/REALM@REALM
Maximum ticket life: 7 days 00:00:00
Maximum renewable life: 10 days 00:00:00
I restart services and then kdestroy / kinit / klist :
Ticket cache: FILE:/tmp/krb5cc_596_yE9M3i
Default principal: USER@REALM
Valid starting Expires Service principal
12/01/04 15:15:19 12/02/04 15:15:19 krbtgt/REALM@REALM
12/01/04 15:15:35 12/02/04 01:15:35 ldap/server@REALM
Kerberos 4 ticket cache: /tmp/tkt596
klist: You have no tickets cached
Kenneth Grady wrote:
>look at principal krbtgt/REALM@REALM and kadmin/admin@REALM
>grep max krb.conf and krb5.conf
>
>On Wed, 2004-12-01 at 12:22, FM wrote:
>
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
