[OpenAFS] Token Lifetime

FBO fbo2@gmx.net
Mon, 30 Sep 2002 18:04:36 +0200


On Mon, Sep 30, 2002 at 10:23:18AM -0500, Neulinger, Nathan wrote:
> What do you have set for the lifetime of the "afs" principal? That will
> also limit the max life. 
> 
> usable life by user < max life for user < max life of afs@REALM < max
> lifetime allow by kdc
maxlife-kdc: 1d 0h 0m 0s
maxlife-afs@REALM: 2d 0h 0m 0s
maxlife-my_principal: 1d 0h 0m 0s

If I use kinit or "kinit -l 24h", I always get a
10-hours-ticket.

As long as maxlife-my_principal is higher than
10h, openafs-win32 doesn't like me
(expiration date 01.01.1601 ...) :-( .

FBO