[Samba] Kerberos ticket lifetime

Jason Keltz jas at eecs.yorku.ca
Wed Sep 30 17:50:52 UTC 2020


Hi Remy,

I hope that you're doing well...

On 9/30/2020 1:12 PM, Remy Zandwijk via samba wrote:
>> On the client, add:
>>
>> gensec_gssapi:requested_life_time = <int> # seconds
>>
>> to smb4.conf. E.g. a ticket life time of one hour:
>>
>> gensec_gssapi:requested_life_time = 3600
>
> Sorry, I should have written 'Samba member server' instead of 'client', although technically speaking, the member server is an AD client.
>
I'm a bit puzzled.  I tried this on the AD client,  restarted Samba, 
logged out and in, and it didn't make any difference.  I did the same 
thing from the DC.

I also don't see gensec_gssapi mentioned at all in the smb.conf man page 
at least for the version that we are running...

Jason.




More information about the samba mailing list