Yes I have and both the krbtgt/SANTORO.ORG and the stefano principals have ticket lifetime policies that match the KDC conf max values:
kadmin: getprinc stefano Principal: stefano ... ... Maximum ticket life: 0 days 10:00:00 Maximum renewable life: 7 days 00:00:00 ... Number of keys: 2 Key: vno 1, Triple DES cbc mode with HMAC/sha1, no salt Key: vno 1, DES cbc mode with CRC-32, no salt Attributes: Policy: [none] kadmin: getprinc krbtgt/SANTORO.ORG Principal: krbtgt/SANTORO.ORG... ... Maximum ticket life: 0 days 10:00:00 Maximum renewable life: 7 days 00:00:00 .... Number of keys: 2 Key: vno 1, Triple DES cbc mode with HMAC/sha1, no salt Key: vno 1, DES cbc mode with CRC-32, no salt Attributes: Policy: [none] ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
