> > Also check the properties on the client and service principals > > (including the krbtgt principals). I forget whether max renewable > > lifetime is one of them, but if it is, it would be set when the > > principal is created or when you use "modprinc" in kadmin, and the > > config file specifications won't extend it, only (potentially) further > > limit it. > > You had me all excited for a minute... but no: > > kadmin: getprinc phil > ... > Maximum renewable life: 7 days 00:00:00
That's the client. What about getprinc krbtgt/[EMAIL PROTECTED] ? ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos