It is possible to request tickets with a “negative” lifetime, e.g. “kinit -l -3600”.

 

It shouldn’t be possible to request tickets whose “start time” is greater than the “expiration time”. I suspect there be some issues on 32-bit OS’s with underflows.