[Samba] Kerberos ticket lifetime
Jason Keltz
jas at eecs.yorku.ca
Wed Sep 30 17:50:52 UTC 2020
Hi Remy,
I hope that you're doing well...
On 9/30/2020 1:12 PM, Remy Zandwijk via samba wrote:
>> On the client, add:
>>
>> gensec_gssapi:requested_life_time = <int> # seconds
>>
>> to smb4.conf. E.g. a ticket life time of one hour:
>>
>> gensec_gssapi:requested_life_time = 3600
>
> Sorry, I should have written 'Samba member server' instead of 'client', although technically speaking, the member server is an AD client.
>
I'm a bit puzzled. I tried this on the AD client, restarted Samba,
logged out and in, and it didn't make any difference. I did the same
thing from the DC.
I also don't see gensec_gssapi mentioned at all in the smb.conf man page
at least for the version that we are running...
Jason.
More information about the samba
mailing list