[Petter Reinholdtsen]
> Anyone got any ideas how to properly fix this?

I suspect this patch will solve it for first time installations.  We
need to figure out how to fix it for existing installations too.

Index: share/debian-edu-config/tools/kerberos-kdc-init
===================================================================
--- share/debian-edu-config/tools/kerberos-kdc-init     (revisjon 77105)
+++ share/debian-edu-config/tools/kerberos-kdc-init     (arbeidskopi)
@@ -237,8 +237,9 @@
     kadmin.local -q "ktadd -k /etc/krb5.keytab.smtp smtp/tjener.intern"
     chown Debian-exim:Debian-exim /etc/krb5.keytab.smtp
 
-    # Kerberos policy setup
-    kadmin.local -q "addpol -maxlife \"2 days\" -minlength 5 users"
+    # Kerberos policy setup.  Make sure passwords never expire, as
+    # long as LDAP and Samba passwords do not expire.
+    kadmin.local -q "addpol -maxlife never -minlength 5 users"
     kadmin.local -q "addpol -minclasses 2 hosts"
 }
 

Anyone know why the -maxlife "2 days" were there in the first place?
-- 
Happy hacking
Petter Reinholdtsen



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to