On Fri, Jun 19, 2026 at 4:37 PM Alexander Bokovoy <[email protected]> wrote:
> As said by others, you don't need the ticket validity for longer time. > Instead, what you are looking at is renewable tickets. This is working > well with KCM storage -- sssd_kcm is refreshing tickets automatically. > Fedora's FreeIPA deployment is configured to allow two weeks of total > renewable time of 24hr tickets. As I recall with recent Fedora's, and sssd-kcm installed (which drops in some files into /etc/krb5.conf.d), and running, it (ticket renewal) all just works (at least I don't need to take action or think about it, and not thinking is one of my new core competencies). Of course, that does mean that every seven days or so I need to get a new ticket, but that does not seem overly onerous (personally I just do a fkinit at the start of a new week). -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
