> [libdefaults] > renew_lifetime = 30d > > in krb5.conf and tickets are renewable for 30 days by default here. Doesn't > that work for you?
That works, but I don't think is enables me to say: "I want renewable and just give me the default from the KDC" like with the --renewable command line flag. Maybe I could set renew_lifetime = 1y and always get max (as 1y is capped by the KDC) but is that the same thing (is default given by KDC == maximum possible by KDC) Harald. > > Cheers, > Andreas > -- > | Andreas Haupt | E-Mail: andreas.ha...@desy.de > | DESY Zeuthen | WWW: http://www-zeuthen.desy.de/~ahaupt > | Platanenallee 6 | Phone: +49/33762/7-7359 > | D-15738 Zeuthen | Fax: +49/33762/7-7216 > >
