[Samba] Kerberos ticket lifetime

Jason Keltz jas at eecs.yorku.ca
Wed Sep 30 17:50:52 UTC 2020

Hi Remy,

I hope that you're doing well...

On 9/30/2020 1:12 PM, Remy Zandwijk via samba wrote:
>> On the client, add:
>> gensec_gssapi:requested_life_time = <int> # seconds
>> to smb4.conf. E.g. a ticket life time of one hour:
>> gensec_gssapi:requested_life_time = 3600
> Sorry, I should have written 'Samba member server' instead of 'client', although technically speaking, the member server is an AD client.
I'm a bit puzzled.  I tried this on the AD client,  restarted Samba, 
logged out and in, and it didn't make any difference.  I did the same 
thing from the DC.

I also don't see gensec_gssapi mentioned at all in the smb.conf man page 
at least for the version that we are running...


More information about the samba mailing list