Le 13/04/2010 20:23, Russ Allbery a écrit : > I assume that you're using my PAM module here, since I think it's the only > one that looks at [appdefaults].pam. (I could be wrong, though; maybe the > Red Hat one does as well.) Anyway, for mine, you want to use > renew_lifetime, not renewable: > > renew_lifetime=<lifetime> > Obtain renewable tickets with a maximum renewable lifetime of > <lifetime>. <lifetime> should be a Kerberos lifetime string such > as "2d4h10m" or a time in minutes. If set, this overrides the > Kerberos library default set in the [libdefaults] section of > krb5.conf. > > This option can be set in krb5.conf and is only applicable to the > auth group. I forgot to thanks both of you for this answer, due to hollidays. It works like a charm now.
-- BOFH excuse #436: Daemon escaped from pentagram
________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
