Ticket History #6680: the "ticket_lifetime" setting isn't documented

From krb5-bugs-incoming-bounces@PCH.mit.edu Fri Mar 12 13:58:05 2010
Return-Path: <krb5-bugs-incoming-bounces@PCH.mit.edu>
Received: from pch.mit.edu (PCH.MIT.EDU [18.7.21.90])
by krbdev.mit.edu (Postfix) with ESMTP id AA5DA3F0EA;
Fri, 12 Mar 2010 13:58:05 -0500 (EST)
Received: from pch.mit.edu (pch.mit.edu [127.0.0.1])
by pch.mit.edu (8.13.6/8.12.8) with ESMTP id o2CIw5CH015377;
Fri, 12 Mar 2010 13:58:05 -0500
Received: from mailhub-dmz-1.mit.edu (MAILHUB-DMZ-1.MIT.EDU [18.9.21.41])
by pch.mit.edu (8.13.6/8.12.8) with ESMTP id o2CItuws014817
for <krb5-bugs-incoming@PCH.mit.edu>; Fri, 12 Mar 2010 13:55:56 -0500
Received: from dmz-mailsec-scanner-4.mit.edu (DMZ-MAILSEC-SCANNER-4.MIT.EDU
[18.9.25.15])
by mailhub-dmz-1.mit.edu (8.13.8/8.9.2) with ESMTP id o2CIrgio007060
for <krb5-bugs@mit.edu>; Fri, 12 Mar 2010 13:55:56 -0500
X-AuditID: 1209190f-b7b20ae000003f85-85-4b9a8e3b9de5
Received: from mx1.redhat.com (mx1.redhat.com [209.132.183.28])
by dmz-mailsec-scanner-4.mit.edu (Symantec Brightmail Gateway) with
SMTP id 31.1E.16261.B3E8A9B4; Fri, 12 Mar 2010 13:55:56 -0500 (EST)
Received: from int-mx02.intmail.prod.int.phx2.redhat.com
(int-mx02.intmail.prod.int.phx2.redhat.com [10.5.11.12])
by mx1.redhat.com (8.13.8/8.13.8) with ESMTP id o2CItsdb012904
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK)
for <krb5-bugs@mit.edu>; Fri, 12 Mar 2010 13:55:55 -0500
Received: from blade.bos.redhat.com (blade.bos.redhat.com [10.16.0.23])
by int-mx02.intmail.prod.int.phx2.redhat.com (8.13.8/8.13.8) with ESMTP
id o2CItrf6008449
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <krb5-bugs@mit.edu>; Fri, 12 Mar 2010 13:55:54 -0500
Received: from blade.bos.redhat.com (localhost [127.0.0.1])
by blade.bos.redhat.com (8.14.4/8.14.3) with ESMTP id o2CItr5F022527
for <krb5-bugs@mit.edu>; Fri, 12 Mar 2010 13:55:53 -0500
Received: (from nalin@localhost)
by blade.bos.redhat.com (8.14.4/8.14.4/Submit) id o2CItrQQ022526;
Fri, 12 Mar 2010 13:55:53 -0500
Date: Fri, 12 Mar 2010 13:55:53 -0500
Message-Id: <201003121855.o2CItrQQ022526@blade.bos.redhat.com>
To: krb5-bugs@mit.edu
Subject: the "ticket_lifetime" setting isn't documented
From: nalin@redhat.com
X-send-pr-version: 3.99
X-Scanned-By: MIMEDefang 2.67 on 10.5.11.12
X-Brightmail-Tracker: AAAAARM9I9Y=
X-Mailman-Approved-At: Fri, 12 Mar 2010 13:58:05 -0500
X-BeenThere: krb5-bugs-incoming@mailman.mit.edu
X-Mailman-Version: 2.1.6
Precedence: list
Reply-To: nalin@redhat.com
Sender: krb5-bugs-incoming-bounces@PCH.mit.edu
Errors-To: krb5-bugs-incoming-bounces@PCH.mit.edu



System: Linux blade.bos.redhat.com 2.6.31.9-174.fc12.x86_64 #1 SMP Mon Dec 21 05:33:33 UTC 2009 x86_64 x86_64 x86_64 GNU/Linux
Architecture: x86_64

The "ticket_lifetime" settings isn't documented in the administrator's
guide or krb5.conf man page.
This is one possible patch.

Index: doc/admin.texinfo
===================================================================
--- doc/admin.texinfo (revision 23799)
+++ doc/admin.texinfo (working copy)
@@ -583,6 +583,11 @@
fail if the client machine does not have a keytab. The default for the
flag is @value{DefaultVerifyApReqNofail}.

+@itemx ticket_lifetime
+The value of this tag is the default lifetime for
+initial tickets. The default value for the tag is
+@value{DefaultTktLifetime}.
+
@itemx renew_lifetime
The value of this tag is the default renewable lifetime for
initial tickets. The default value for the tag is
Index: src/config-files/krb5.conf.M
===================================================================
--- src/config-files/krb5.conf.M (revision 23799)
+++ src/config-files/krb5.conf.M (working copy)
@@ -220,6 +220,10 @@
fail if the client machine does not have a keytab. The default for the
flag is false.

+.IP ticket_lifetime
+The value of this tag is the default lifetime for initial tickets. The
+default value for the tag is 1 day (1d).
+
.IP renew_lifetime
The value of this tag is the default renewable lifetime for initial
tickets. The default value for the tag is 0.

Document the ticket_lifetime libdefaults setting (which was added in
r16656, #2656). Based on a patch from nalin@redhat.com.


https://github.com/krb5/krb5/commit/a5809781b1caa0ee59e18a9db423e9db24c0dc7e
Commit By: ghudson
Revision: 23820
Changed Files:
U trunk/doc/admin.texinfo
U trunk/src/config-files/krb5.conf.M