[OpenAFS] token lifetime

Jayen Ashar jayen@science.unsw.edu.au
Fri, 6 Jul 2012 18:44:46 +1000


On Fri, Jul 6, 2012 at 6:08 PM, Jeffrey Altman
<jaltman@secure-endpoints.com> wrote:
> The code in question is tkt_DecodeTicket5() in src/rxkad/ticket5.c and
> tkt_CheckTimes() in src/rxkad/ticket.c.    If the 'end' value is not
> exactly NEVERDATE (0xFFFFFFFF) and ('end' - 'start' is greater than
> 30 days, the token will be rejected.

Can I do anything (without changing code) to make the end 0xFFFFFFFF?
As far as I can set, the end is only 0x7FFFFFFF.  If not, is it
reasonable to change the 'end' - 'start' to 180 days?

Thanks,
Jayen