Re: renewable in krb5.conf

Andreas Haupt <[email protected]> Thu, 15 Mar 2018 09:57:05 +0100
Newsgroups gmane.comp.encryption.kerberos.heimdal.general
Organization DESY
Message-ID <[email protected]>
Hi Harald,

On Thu, 2018-03-15 at 09:30 +0100, Harald Barth wrote:
> Is there really no way to make kinit have "renewable" as default (like
> "forwardable" in [libdefaults] in /etc/krb5.conf)?
> 
> If no, is there any good reason for it?

We have:

[libdefaults]
	renew_lifetime = 30d

in krb5.conf and tickets are renewable for 30 days by default here. Doesn't
that work for you?

Cheers,
Andreas
-- 
| Andreas Haupt            | E-Mail: [email protected]
|  DESY Zeuthen            | WWW:    http://www-zeuthen.desy.de/~ahaupt
|  Platanenallee 6         | Phone:  +49/33762/7-7359
|  D-15738 Zeuthen         | Fax:    +49/33762/7-7216
smime.p7s (application/x-pkcs7-signature, 4.8 KB) - not displayed