Store Commands
Sets the maximum allowable ticket lifetime in seconds, minutes, hours, or days:
store kerberos config tktlife <LIFE_TIME> <smhd>
<life_time> is between 300 seconds and 259200 seconds (3 days). The time units cannot be mixed and there must be at least one space between the <life_time> value and the time units (s, m, h, or d). Default value is 43200 seconds.
Sets the maximum allowable renewable lifetime in seconds, minutes, hours, or days:
store kerberos config renewlife <RENEW_LIFE_TIME> <smhd>
<renew_life_time> is 0 (i.e. no limit) or between 300 seconds and 604800 seconds (7 days). The time units cannot be mixed and there must be at least one space between the <renew_life_time> value and the time unit (s, m, h, or d). Default value is 0.
Configures the KDC port:
store kerberos config kport <KDC_PORT>
<kdc_port> is the
Configures the KDC name portion of the service principal:
store kerberos config kname <KDC_NAME>
<kdc_name> has a maximum of 127 characters excluding “:” and “/”. Default is krbtgt.
Configures the KDC realm portion:
store kerberos config krealm <KDC_REALM>
<kdc_realm> is usually set to the uppercase name of the Windows 2000 KDC to which the Access Point is configured. <kdc_realm> has 0 to 127 characters excluding “:” and “/”. Default is localrealm.
225