Store Commands
333
NOTE: The Microsoft step-by-step Guide to Kerberos 5 (krb5 1.0)
Interoperability recommends that your system clock be
sychronized within two minutes to the KDC system’s clock.
Otherwise, clock skew errors will cause Kerberos
authentication to fail. If this is the case, the clock skew
default may need to scale down to two minutes.
WIRELESS
ADAPTER,
WIRELESS
Sets the maximum allowable ticket lifetime in seconds, minutes,
hours, or days:
store kerberos config tktlife <life_time> <s|m|h|d>
<life_time> is between 300 seconds and 259200 seconds (3
days). The time units cannot be mixed and there must be at
least one space between the <life_time> value and the time
units (s, m, h, or d). Default value is 43200 seconds.
WIRELESS
ADAPTER,
WIRELESS
Sets the maximum allowable renewable lifetime in seconds,
minutes, hours, or days:
store kerberos config renewlife <renew_life_time>
<s|m|h|d>
<renew_life_time> is 0 (i.e. no limit) or between 300 seconds
and 604800 seconds (7 days). The time units cannot be mixed
and there must be at least one space between the
<renew_life_time> value and the time unit (s, m, h, or d).
Default value is 0.
WIRELESS
ADAPTER,
WIRELESS
Configures the KDC port:
store kerberos config kport <kdc_port>
<kdc_port> is the 2-byte UPD/TCP port used for Kerberos
communication. Default is 88.
WIRELESS
ADAPTER,
WIRELESS
Configures the KDC name portion of the service principal:
store kerberos config kname <kdc_name>
<kdc_name> has a maximum of 127 characters excluding
“:” and “/”. Default is krbtgt.