On Mon, Oct 25, 2004 at 01:51:04PM -0700, Phil Dibowitz wrote:
> 
> Aha!
> 
> Maximum renewable life: 0 days 00:00:00
> 
> So... "krbtgt" is the principal for... the domain? I'm still catching up on
> Kerberos here.
> 
> so a 
>   modprinc -maxrenewlife 7d krbtgt/[EMAIL PROTECTED]
> 
> Should fix this?

To report, yes that did fix it. It turns out "7d" isn't valid, but "7 days"
is.

So a simple:
   modprinc -maxrenewlife 7days krbtgt/[EMAIL PROTECTED]

Did the trick. Things work perfectly now. Thanks so much for everyone's help!

-- 
Phil Dibowitz
Systems Architect and Administrator
Enterprise Infrastructure / ISD / USC
UCC 174 - 213-821-5427

Attachment: pgp7q2f81jDRn.pgp
Description: PGP signature

________________________________________________
Kerberos mailing list           [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to