[8044] in Kerberos
Re: 0 seconds initialization (round 2)
daemon@ATHENA.MIT.EDU (Barry Jaspan)
Thu Sep 19 11:54:24 1996
Date: Thu, 19 Sep 1996 11:39:50 -0400
From: "Barry Jaspan" <bjaspan@MIT.EDU>
To: Christopher Seawood <cseawood@qualcomm.com>
Cc: kerberos@MIT.EDU
In-Reply-To: [8030]
From: Christopher Seawood <cseawood@qualcomm.com>
Reply-To: Christopher Seawood <cseawood@qualcomm.com>
Ok. I tried everybody's suggestions (one at a time and
collectively).
Did you change the max_life of *all* principals in the database, or
just the user principal you are kiniting as? In particular, did you
change the max_life of krbtgt/DAUPHIN? If not, that is the problem.
As you can see from the KDC code,
enc_tkt_reply.times.endtime =
min(until,
min(enc_tkt_reply.times.starttime + client.max_life,
min(enc_tkt_reply.times.starttime + server.max_life,
enc_tkt_reply.times.starttime + max_life_for_realm)));
the lifetime of a ticket depends on the max_life of the client and
server (and the requested value, and the value specified via kdc.conf
(or a default)).
If that still doesn't fix the problem, then I'll be concerned. :-)
Barry
