Ticket lifetimes > 10 hrs?
Ken Hornstein
kenh at cmf.nrl.navy.mil
Thu Nov 14 13:17:42 EST 2002
>I seem to be having the same problem. I'm running krb5-1.2.5. I changed my
>kdc.conf so that max_life = 25h 0m 0s. I then restarted kadmind and created
>a test principal. Sure enough, its max life was 25 hours. But when I did a
>'kinit -l 20h' for the principal, I got a TGT which would expire in 10 hours!
>
>I took a look at the max life for my krbtgt/<REALM> and it's 21:15:00 (which
>is what it was before I changed kdc.conf). So, what else should I be looking
>at?
Did you restart your KDC as well?
--Ken
More information about the Kerberos
mailing list