9 jun 2010 kl. 09:15 skrev Greg Hudson: > I think the most practical fix for your problem is to make the Heimdal > KDC more forgiving--it should not squash the validity end time of the > ticket simply because it calculated a lower maximum renewable end time. > If I were a Heimdal developer, I'd propose removing this line from > krb5tgs.c: > > et.endtime = min(et.endtime, *et.renew_till);
Just change the max renew time to be longer then the max lifetime on the principal ? Love
________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
