Store Commands

NOTE: The Microsoft step-by-step Guide to Kerberos 5 (krb5 1.0)

 

Interoperability recommends that your system clock be

 

sychronized within two minutes to the KDC system’s clock.

 

Otherwise, clock skew errors will cause Kerberos

 

authentication to fail. If this is the case, the clock skew

 

default may need to scale down to two minutes.

WIRELESS

Sets the maximum allowable ticket lifetime in seconds, minutes,

ADAPTER,

hours, or days:

WIRELESS

store kerberos config tktlife <life_time> <smhd>

 

<life_time> is between 300 seconds and 259200 seconds (3

 

days). The time units cannot be mixed and there must be at

 

least one space between the <life_time> value and the time

 

units (s, m, h, or d). Default value is 43200 seconds.

WIRELESS

Sets the maximum allowable renewable lifetime in seconds,

ADAPTER,

minutes, hours, or days:

WIRELESS

store kerberos config renewlife <renew_life_time>

 

<smhd>

 

<renew_life_time> is 0 (i.e. no limit) or between 300 seconds

 

and 604800 seconds (7 days). The time units cannot be mixed

 

and there must be at least one space between the

 

<renew_life_time> value and the time unit (s, m, h, or d).

 

Default value is 0.

WIRELESS

Configures the KDC port:

ADAPTER,

store kerberos config kport <kdc_port>

WIRELESS

<kdc_port> is the 2-byte UPD/TCP port used for Kerberos

 

communication. Default is 88.

WIRELESS

Configures the KDC name portion of the service principal:

ADAPTER,

store kerberos config kname <kdc_name>

WIRELESS

<kdc_name> has a maximum of 127 characters excluding

 

“:” and “/”. Default is krbtgt.

333

Page 333
Image 333
IBM 6500 manual Interoperability recommends that your system clock be