Re: renewable in krb5.conf

Harald Barth <[email protected]> Thu, 15 Mar 2018 11:14:05 +0100 (CET)

Newsgroups	gmane.comp.encryption.kerberos.heimdal.general
Message-ID	<[email protected]>

> [libdefaults]
> 	renew_lifetime = 30d
> 
> in krb5.conf and tickets are renewable for 30 days by default here. Doesn't
> that work for you?

That works, but I don't think is enables me to say: "I want renewable
and just give me the default from the KDC" like with the --renewable
command line flag. Maybe I could set renew_lifetime = 1y and always
get max (as 1y is capped by the KDC) but is that the same thing (is
default given by KDC == maximum possible by KDC)

Harald.


> 
> Cheers,
> Andreas
> -- 
> | Andreas Haupt            | E-Mail: [email protected]
> |  DESY Zeuthen            | WWW:    http://www-zeuthen.desy.de/~ahaupt
> |  Platanenallee 6         | Phone:  +49/33762/7-7359
> |  D-15738 Zeuthen         | Fax:    +49/33762/7-7216
> 
>