[Samba] Kerberos ticket lifetime

Rowland penny rpenny at samba.org
Thu Oct 1 12:34:55 UTC 2020


On 01/10/2020 13:30, Jason Keltz via samba wrote:
> On 10/1/2020 8:28 AM, Rowland penny via samba wrote:
>
>> On 01/10/2020 13:17, Jason Keltz via samba wrote:
>>> So why is it that winbind renews the ticket on the original system, 
>>> but on the system that I ssh to, it does not.
>>
>> Do you have 'winbind refresh tickets = yes' set on all the systems ?
>
> Absolutely.  In fact,  both systems are using the identical smb.conf, 
> identical PAM configuration, and idential pam_winbind.conf.
>
> Jason.
>
>
Thinking about it, when you login via ssh, PAM via pam-winbind should 
get you a new ticket on that client.

Rowland





More information about the samba mailing list