On 7/12/07, Jeff Blaine <jblaine@kickflop.net> wrote: > I spoke way too soon. > > One of them was off. > > They're all three set to "2 days" now as a test and I still only > get tickets and tokens for 24hrs. There is also the max_life parameter that can be set in kdc.conf. (Maximum ticket lifetime for the realm.) The default for this is 10h, so perhaps it is set to 24h in your kdc.conf?