Date: Sun, 30 Oct 2016 07:48:28 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 213909] pam_krb5 ignores ticket lifetime configuration in /etc/krb5.conf Message-ID: <bug-213909-8@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D213909 Bug ID: 213909 Summary: pam_krb5 ignores ticket lifetime configuration in /etc/krb5.conf Product: Base System Version: 11.0-RELEASE Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: bin Assignee: freebsd-bugs@FreeBSD.org Reporter: basarevych@gmail.com I am using NIS and Kerberos from the base system of FreeBSD 11. Whenever I login to workstation (text console) I get keys like this: > klist Credentials cache: FILE:/tmp/krb5cc_1001 Principal: ross@LAN Issued Expires Principal Oct 30 09:29:12 2016 Oct 30 19:29:12 2016 host/desktop.lan@LAN Oct 30 09:29:12 2016 Oct 30 19:29:12 2016 krbtgt/LAN@LAN They are valid for exactly 10 hours. However in /etc/krb5.conf I have this: [appdefaults] pam =3D { ticket_lifetime =3D 1d default_lifetime =3D 1d renew_lifetime =3D 1d } [libdefaults] default_realm =3D LAN ticket_lifetime =3D 1d default_lifetime =3D 1d renew_lifetime =3D 1d [domain_realm] .lan =3D LAN [realms] LAN =3D { kdc =3D coffin.lan admin_server =3D coffin.lan kpasswd_server =3D coffin.lan default_domain =3D lan } If I run "kinit ross" manually then I get the tickets for one day as expect= ed. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-213909-8>