[Samba] Re: newbie question reguarding kerberos tickets

[Doug Tucker]

Thanks.  But again, is the ticket even needed?  I deleted the darn
thing, rebooted to make sure it wasn't cached in memory somewhere, and
everything seems to be working perfectly.  If it is indeed needed, and I
need to extend the period, is there any directions on how to do that on
the windows side?


On Thu, 2006-05-11 at 23:07 +0200, Blaž Primc wrote:
> Hi,
> 
> the period for which the ticket is valid can be set in Windows Server.
> 
> Best regards, Blaž.
> 
> Doug Tucker wrote:
> > I recently joined a samba 3.0.22 server to AD.  When I did the kinit,
> > the AD gave me a 24 hour ticket with a 1 week renewal.  Setting -r and
> > -l to 365d did not change anything, the ticket still came back the same.
> > However, my question is in reguard to whether this is really even
> > needed?  First, I deleted the ticket, and everything seemed to continue
> > to work perfectly.  Now, I let the ticket expire for a couple of weeks
> > now, and yet, the samba server is working fine and users still
> > authenticate against AD just fine.  Am I missing something, or is the
> > creation of that ticket not even needed?  Thank you for your assistance.
> > 
> > doug...
> > 
>