|
<emphasis>h</emphasis> for hours
|
|
|
<emphasis>d</emphasis> for days.
|
|
|
If there is no unit given, <emphasis>s</emphasis> is assumed.
|
|
|
NOTE: It is not possible to mix units. To set the renewable lifetime to one and a half hours, use '90m' instead of '1h30m'.
|
|
|
Default: not set, i.e. the TGT is not renewable
|
|
|
krb5_lifetime (string)
|
|
|
Request ticket with a lifetime, given as an integer immediately followed by a time unit:
|
|
|
If there is no unit given <emphasis>s</emphasis> is assumed.
|
|
|
NOTE: It is not possible to mix units. To set the lifetime to one and a half hours please use '90m' instead of '1h30m'.
|
|
|
Default: not set, i.e. the default ticket lifetime configured on the KDC.
|
|
|
krb5_renew_interval (string)
|
|
|
The time in seconds between two checks if the TGT should be renewed. TGTs are renewed if about half of their lifetime is exceeded, given as an integer immediately followed by a time unit:
|
|
|
If this option is not set or is 0 the automatic renewal is disabled.
|
|
|
Specifies if the host and user principal should be canonicalized. This feature is available with MIT Kerberos 1.7 and later versions.
|
|
