14.5. Configuring the global ticket lifecycle policy

Procedure

1. To modify the global ticket policy:

   [root@server ~]# ipa krbtpolicy-mod --maxlife=$((8*60*60)) --maxrenew=$((24*60*60))
     Max life: 28800
     Max renew: 86400

   In this example, the maximum lifetime is set to eight hours (8 * 60 minutes * 60 seconds) and the maximum renewal age is set to one day (24 * 60 minutes * 60 seconds).

2. Optional: To reset the global Kerberos ticket policy to the default installation values:

   [root@server ~]# ipa krbtpolicy-reset
     Max life: 86400
     Max renew: 604800