I have 2 more questions:
1. Don't you know then, if there is some parameter of pam_krb5 module config to force it to try to get a longer lifetime? (I mean equivalent of "kinit -r somevalue -l somevalue")
2. By default I don't get renewable ticket, even if I should (the principle is allowed renewable). I only get it, when I specify it with parameter of kinit. Can I change this behaviour?
Thank you.
lukas
Sam Hartman wrote:
"Lukas" == Lukas Kubin <[EMAIL PROTECTED]> writes:
Lukas> What do I need to configure on Linux KDC to have longer
Lukas> default tickets (ie. the lifetime when I use kinit without
Lukas> parameters)?
MIT's kinit uses a hard coded default lifetime. This is sort of unfortunate.
-- Lukas Kubin
phone: +420596398275 email: [EMAIL PROTECTED]
Information centre The School of Business Administration in Karvina Silesian University in Opava Czech Republic http://www.opf.slu.cz
smime.p7s
Description: S/MIME Cryptographic Signature
________________________________________________ Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos