Check the max ticket lifetime of krbtgt/YOUR.REALM.NAME, to start with. If you want longer-lived application service tickets, you'll have to update those principals as well.
Ken
________________________________________________ Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos