Re: Default ticket lifetime

2005-07-04 Thread Russ Allbery
Ryan Underwood [EMAIL PROTECTED] writes: On Wed, Jun 29, 2005 at 10:04:40AM -0700, Russ Allbery wrote: All that code to support appdefault configuration in kinit is a local modification, which is also why default_lifetime was working for us locally but isn't working for you. Hmm, so are you

Re: Default ticket lifetime

2005-06-29 Thread Christian Pfaffel-Janser
Ryan Underwood [EMAIL PROTECTED] writes: On Tue, Jun 28, 2005 at 09:36:42PM -0700, Russ Allbery wrote: Ryan Underwood [EMAIL PROTECTED] writes: From the Changelog, it looks like this was disabled sometime in 1996 and never revisited. But this is what I was referring to in my original

Re: Default ticket lifetime

2005-06-29 Thread Russ Allbery
Ryan Underwood [EMAIL PROTECTED] writes: On Tue, Jun 28, 2005 at 09:36:42PM -0700, Russ Allbery wrote: That would be default_lifetime in [appdefaults]. Are you sure that you have the time specification syntax right? Yeah, I just don't have the code you quoted in the 1.3.6 kinit.c - that

Re: Default ticket lifetime

2005-06-28 Thread Russ Allbery
Ryan Underwood [EMAIL PROTECTED] writes: I'm trying to set a default ticket lifetime longer than the 10 hour default in /etc/krb5.conf (without hacking the source). It appears that at one point there was a tkt_lifetime option, but that it was later removed. Is there any way to do this in

Re: Default ticket lifetime

2005-06-28 Thread Ryan Underwood
On Tue, Jun 28, 2005 at 08:04:16PM -0700, Russ Allbery wrote: Ryan Underwood [EMAIL PROTECTED] writes: I'm trying to set a default ticket lifetime longer than the 10 hour default in /etc/krb5.conf (without hacking the source). It appears that at one point there was a tkt_lifetime

Re: Default ticket lifetime

2005-06-28 Thread Russ Allbery
Ryan Underwood [EMAIL PROTECTED] writes: I've tried this in both the appdefaults and realms sections with no effect. Additionally, it does not turn up in a source grep. I should mention that I am able to obtain tickets of the correct length by using the '-l' option to kinit, so the KDC and

Re: Default ticket lifetime

2005-06-28 Thread Ryan Underwood
On Tue, Jun 28, 2005 at 08:49:34PM -0700, Russ Allbery wrote: Ah, hm. #if 0 /* Default ticket lifetime is currently not supported */ profile_get_integer(ctx-profile, libdefaults, tkt_lifetime, 0, 10 * 60 * 60, tmp); ctx-tkt_lifetime =

Re: Default ticket lifetime

2005-06-28 Thread Russ Allbery
Ryan Underwood [EMAIL PROTECTED] writes: From the Changelog, it looks like this was disabled sometime in 1996 and never revisited. But this is what I was referring to in my original post. Was this a bad idea for some reason? It looks more like an effort was made to add it, but never really

Re: Default ticket lifetime

2005-06-28 Thread Ryan Underwood
On Tue, Jun 28, 2005 at 09:36:42PM -0700, Russ Allbery wrote: Ryan Underwood [EMAIL PROTECTED] writes: From the Changelog, it looks like this was disabled sometime in 1996 and never revisited. But this is what I was referring to in my original post. Was this a bad idea for some reason?

Re: Default ticket lifetime

2005-06-28 Thread Russ Allbery
Ryan Underwood [EMAIL PROTECTED] writes: Woops; I'm using 1.3.6 from Debian. I guess that means this feature has been recently added? Yup, looks like all that code has been significantly redone in 1.4. I agree, I don't see anything in 1.3.6 that would let you change the default ticket

Re: Default ticket lifetime

2005-06-28 Thread Ryan Underwood
On Tue, Jun 28, 2005 at 09:51:47PM -0700, Russ Allbery wrote: Yup, looks like all that code has been significantly redone in 1.4. I agree, I don't see anything in 1.3.6 that would let you change the default ticket lifetime in krb5.conf. Is an upgrade of the package planned? I only see one

Re: Default ticket lifetime

2005-06-28 Thread Russ Allbery
Ryan Underwood [EMAIL PROTECTED] writes: On Tue, Jun 28, 2005 at 09:51:47PM -0700, Russ Allbery wrote: Yup, looks like all that code has been significantly redone in 1.4. I agree, I don't see anything in 1.3.6 that would let you change the default ticket lifetime in krb5.conf. Is an

Re: Default ticket lifetime

2005-06-28 Thread Ryan Underwood
On Tue, Jun 28, 2005 at 09:57:51PM -0700, Russ Allbery wrote: Sam is working on an upload to experimental but is very busy. I have a few other things on my plate as well, alas, but I hope it won't be too much longer before we can start testing 1.4.1. It's a fairly substantial change and

Re: Default ticket lifetime

2004-04-07 Thread Sam Hartman
Lukas == Lukas Kubin [EMAIL PROTECTED] writes: Lukas What do I need to configure on Linux KDC to have longer Lukas default tickets (ie. the lifetime when I use kinit without Lukas parameters)? MIT's kinit uses a hard coded default lifetime. This is sort of unfortunate.

Re: Default ticket lifetime

2004-04-07 Thread Lukas Kubin
That's really surprise. I wonder if there is any reason for such constraint. I have 2 more questions: 1. Don't you know then, if there is some parameter of pam_krb5 module config to force it to try to get a longer lifetime? (I mean equivalent of kinit -r somevalue -l somevalue) 2. By default

Re: Default Ticket Lifetime

2003-06-16 Thread Jens Kleineheismann
Moin, Dennis James [EMAIL PROTECTED] wrote: I am trying to set the default ticket lifetime but nothing works. The kinit command seems to ignore the -l option and sets the lifetime to 10 hours. Anyone have any ideas? MIT, Heimdal or Win? I assume, you want to increase the lifetime, don't you.

Re: default ticket lifetime

2003-03-13 Thread Douglas E. Engert
Klaas Hagemann wrote: Jens Kleineheismann schrieb: Hi there, Hi Jens, there are tree points where the ticket lifetime is defined: 1. kdc.conf, you checked this 2. the principals, you checked this as well 3. the /etc/krb5.conf on the client side. There you can define a default ticket