Hi there, first to say, I use MIT Kerberos Version 1.2.6.
I want to increase the lifetime of my tickets from the default 10 hours to 20 hours. So, I set the max_life directive in kdc.conf to 20h 0m 0s and also I set the max_life of the krbtgt/REALM principal and the other service principals to 20 hours. Now, with a simple 'kinit' the tickets will expire after 10 hours. If I do a 'kinit -l 20h', the result will be as expected, the Tickets will expire after 20 hours. But now I want to get rid of the '-l 20h'. And not only for kinit, because I also use a PAM module, where I cannot specify a ticket lifetime (without patching the source). Any hint would be great. Oh, and for my understanding how things work: is the default lifetime hardwired in the KDC side or in the client side? Regards, Jens ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
