On Thu, 12 Jul 2007, Russ Allbery wrote:

Jeff Blaine <[EMAIL PROTECTED]> writes:

I'm using OpenAFS 1.4.3, pam_afs_session, and pam_krb5 from Russ
Alberry.  Can anyone shed light on why my tickets and tokens have only a
24hr lifetime?

Because the Kerberos libraries hard-code a 24 hour lifetime unless you
configure something else.  You can either set ticket_lifetime in
[libdefaults] in krb5.conf or you can set ticket_lifetime as a pam_krb5
option in [appdefaults] or in the PAM configuration.


if this still fails, try the kinit... i really do want to know if simply specifying a 7 day lifetime on the command line does what you want

oh right. heimdal or mit on the client?

_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to