[OpenAFS-devel] AFS + Heimdal "afs" principal question

[Derrick J Brashear]

On Mon, 9 Dec 2002, Alf Wachsmann wrote:

> But when I am using AFS' "klog" directly against my Heimdal KDC compiled
> with Krb4 and kaserver support I get an AFS token that is valid 100 hours.

I guess the time enforcement in the "fake ka" interface in the Heimdal kdc
is different.

> I would like to understand the following two things:
> - Why does the "afs" principal in AFS need a 100 hour ticket lifetime?

It doesn't.

> - What will/can go wrong in my converted cell when I set the ticket
>   lifetime by hand down to 25 hours?

andrew.cmu.edu is 25 hours. No problems.