I am in the process of installing AFS at my site, and have a question
about ticket lifetimes. I had planned to use the default 25 hour lifetime,
but my management doesn't want the users who leave themselves logged in
overnight to be bothered by having their ticket expire.
No matter what lifetime I choose, the users are going to have to develop
a consciousness about ticket lifetimes. That aside, what are the issues
I should consider in choosing the default ticket lifetime? Clearly
there are in tradeoffs between convenience and security, and
unless I can demonstrate the benefit of a shorter ticket lifetime,
my management will insist on 30-day tickets.
What lifetimes do other sites use?
Thanks for your help.
