Administration

Rules for Setting Maximum Ticket Lifetime

Rules for Setting Maximum Ticket Lifetime

Enter a value in the Maximum Ticket Lifetime box to indicate the maximum lifetime that a ticket may be issued to the principal.

The value format is [Nw] [Nd] [Nh] [Nm], where N is an integer number, and the lower case suffix identifies the unit of time: weeks, days, hours or minutes respectively. A number with no suffix, w,d,h or m, is interpreted as hours.

NOTE

Spaces are not allowed between the number and the suffix.

 

 

Example

1d3h is one day and three hours

9h18m is nine hours and eighteen minutes

26 is twenty-six hours

You can also express the time units by the full word. For example, 1day is the same as 1d. Key words are week, day, hour and minute are also supported.

The maximum lifetime for a ticket issued to any principal in any given realm is controlled by the settings for the reserved principal krbtgt/REALM@REALM.

134

Chapter 6