>Oops, no I hadn't! So, I just restarted krb5kdc and that seems to do it. >Of course, I still can't get a TGT with a lifetime greater than 21:15:00, >which is the max life set for my krbtgt principal. But at least I know >that 'kinit -l' isn't broken.
So, I guess the key is you need to set: - max_life in kdc.conf - Restart kdc - desired lifetime on both client and krbtgt principal (and probably service principals as well). --Ken ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos
