[24828] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Unable to to get a TGT that abides to specified renewal interval

daemon@ATHENA.MIT.EDU (vtkstef)
Mon Oct 17 15:02:30 2005

From: "vtkstef" <vtkstef@gmail.com>
Date: 15 Oct 2005 09:36:03 -0700
Message-ID: <1129394163.918159.94600@z14g2000cwz.googlegroups.com>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu

Yes I have and both the krbtgt/SANTORO.ORG and the stefano principals
have ticket lifetime policies that match the KDC conf max values:

kadmin:  getprinc stefano
Principal: stefano ...
...
Maximum ticket life: 0 days 10:00:00
Maximum renewable life: 7 days 00:00:00
...
Number of keys: 2
Key: vno 1, Triple DES cbc mode with HMAC/sha1, no salt
Key: vno 1, DES cbc mode with CRC-32, no salt
Attributes:
Policy: [none]
kadmin:  getprinc krbtgt/SANTORO.ORG
Principal: krbtgt/SANTORO.ORG...
...
Maximum ticket life: 0 days 10:00:00
Maximum renewable life: 7 days 00:00:00
....
Number of keys: 2
Key: vno 1, Triple DES cbc mode with HMAC/sha1, no salt
Key: vno 1, DES cbc mode with CRC-32, no salt
Attributes:
Policy: [none]

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post