[OpenAFS] token lifetime

[Mustafa A. Hashmi]

On 6/28/06, Ron Croonenberg <ronc@depauw.edu> wrote:
> I am trying to find how to change the "lifetime" of an AFS token for a specific
> user.

This is dependant on the life of the kerberos ticket the user gets
(for the service in question as well).

For example: to get a 2 day token, modify the principal in kerberos
setting maxlife to 2 days, then proceed to modify the maxlife of the
afs/host service entry to two days as well. I think one also needs to
modify the kdc.conf file for the realm in question -- setting the
variable 'max_life' to 2 days.

Maybe someone else can confirm this.

Regards,
-- 
Mustafa A. Hashmi
mahashmi@gmail.com
mh@stderr.net