RE: [Samba] kerberos ticket expired

2004-03-15 Thread Adam Williams
 I have tried kinit -r 7d -l 7d admin to keep the ticket last longer, but it
 ignored my flags and use default 1 day ticket life time. 

As a point of interest - most KDCs enforce a maximum ticket life time,
and kinit can only request up-to that life time; requests for a longer
life will just get 'bumped down'.  Every KDC I've met liked 24hrs as a 
ticket life (one can, of course, always renew).

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] kerberos ticket expired

2004-03-14 Thread steven.TSE
Hi list,

I have tried kinit -r 7d -l 7d admin to keep the ticket last longer, but it
ignored my flags and use default 1 day ticket life time.  It is true that it
shouldn't related to samba but kerberos, but can anyone simple tell me does
the ticket is required after added net ads join into win2000 domain?
thanks for the kindly help.  

steven

-Original Message-
From: steven.TSE 
Sent: Friday, March 12, 2004 6:27 PM
To: [EMAIL PROTECTED]
Subject: [Samba] kerberos ticket expired


Hi,

Does the kerberos ticket useful after added the computer account into
win2000 domain?  Since I find that even the kerberos ticket expired, Samba
still work.  Does that mean I can simple destroy the ticket right after
Samba init?  

Samba3.0.2a on Redhat8.0

Thankyou.

Best Rgds.,
Steven
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] kerberos ticket expired

2004-03-14 Thread Andrew Bartlett
On Mon, Mar 15, 2004 at 11:55:36AM +0800, steven.TSE wrote:
 Hi list,
 
 I have tried kinit -r 7d -l 7d admin to keep the ticket last longer, but it
 ignored my flags and use default 1 day ticket life time.  It is true that it
 shouldn't related to samba but kerberos, but can anyone simple tell me does
 the ticket is required after added net ads join into win2000 domain?
 thanks for the kindly help.  

The ticket can be ignored after the join.

Andrew Bartlett
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba