[24827] in Kerberos
Unable to to get a TGT that abides to specified renewal interval
daemon@ATHENA.MIT.EDU (vtkstef)
Mon Oct 17 14:57:36 2005
From: "vtkstef" <vtkstef@gmail.com>
Date: 15 Oct 2005 00:57:10 -0700
Message-ID: <1129363030.631364.282500@z14g2000cwz.googlegroups.com>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Hi,
I am having problems to get TGTs with renewal periods as specified in
kinit -r option. My kdc.conf realm stanza has these two paramters set:
max_life = 10h 0m 0s
max_renewable_life = 7d 0h 0m 0s
I have explicitely set forwadable flag in the realms
default_principal_flags parameter
I have played with various values in /etc/krb5.conf [libdefault] stanza
renew_lifetime,and ticket_lifetime values, and I have set the principal
-maxrenewlife to 7 days. Still whenever I do a kinit -l 10h -r 7d my
renew untill timestamp is the same as the ticket creation one:
stefano@filo2 ~ $ klist -fc
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: stefano@SANTORO.ORG
Valid starting Expires Service principal
10/15/05 03:51:29 10/15/05 13:51:29 krbtgt/SANTORO.ORG@SANTORO.ORG
renew until 10/15/05 03:51:29, Flags: RI
I would really appreciate any insights to solve this riddle.
Ciao
Stefano
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
