[28955] in Kerberos

home help back first fref pref prev next nref lref last post

kerberos ticket lifetime in Heimdal

daemon@ATHENA.MIT.EDU (Victor Sudakov)
Tue Jan 1 23:00:15 2008

From: Victor Sudakov <vas@mpeks.no-spam-here.tomsk.su>
Date: Wed, 2 Jan 2008 03:33:11 +0000 (UTC)
Message-ID: <flf0ln$glr$1@relay.tomsk.ru>
X-Complaints-To: noc@sibptus.tomsk.ru
To: kerberos@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Colleagues, 

Running "kinit -l3d" or setting ticket_lifetime in krb5.conf results
in TGT's lifetime being 3 days, however all service tickets' lifetime
is still 1 day, like this:

  Issued           Expires          Principal
Jan  2 09:27:44  Jan  5 09:27:44  krbtgt/SIBPTUS.TOMSK.RU@SIBPTUS.TOMSK.RU
Jan  2 09:27:47  Jan  3 09:27:47  host/big.sibptus.tomsk.ru@SIBPTUS.TOMSK.RU

How can I configure Kerberos so that all service tickets also get a
lifetime of 3 days?

TIA.

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
2:5005/49@fidonet http://vas.tomsk.ru/
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post