renewable in krb5.conf

Andreas Haupt andreas.haupt at desy.de
Thu Mar 15 09:57:05 CET 2018


Hi Harald,

On Thu, 2018-03-15 at 09:30 +0100, Harald Barth wrote:
> Is there really no way to make kinit have "renewable" as default (like
> "forwardable" in [libdefaults] in /etc/krb5.conf)?
> 
> If no, is there any good reason for it?

We have:

[libdefaults]
	renew_lifetime = 30d

in krb5.conf and tickets are renewable for 30 days by default here. Doesn't
that work for you?

Cheers,
Andreas
-- 
| Andreas Haupt            | E-Mail: andreas.haupt at desy.de
|  DESY Zeuthen            | WWW:    http://www-zeuthen.desy.de/~ahaupt
|  Platanenallee 6         | Phone:  +49/33762/7-7359
|  D-15738 Zeuthen         | Fax:    +49/33762/7-7216


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4873 bytes
Desc: not available
URL: <http://www.h5l.org/pipermail/heimdal-discuss/attachments/20180315/1426f7e2/attachment.bin>


More information about the Heimdal-discuss mailing list