kfw 2.6 beta 2 If there are no tickets and an application uses KClient to acquire new tickets, the new tickets are generated with a low lifetime; probably under 5 minutes. Leash immediate presents warnings when brought to focus. Getting tickets via GSS calls or directly from Leash gets the properly 10 hours as listed in the configuration.