On Thu, 4 Sep 2014, Brett Randall wrote:
Initially I had checked kdc.conf, but of course clockskew is declared
in krb5.conf, and I found my KDC had a (non-default) setting of
clockskew = 3600 (1 hour). If I wait the full hour, the renewal is
then rejected as expected.
The KDC merges
On 5 September 2014 02:03, Greg Hudson ghud...@mit.edu wrote:
On 09/04/2014 01:58 AM, Brett Randall wrote:
I create a short-life, renewable ticket, then use klist -s to check
before/after it has expired. Then kinit -R is able to renew the
ticket.
From your sequence of operations, you're
