|
|
2641.
|
|
|
Verify with the help of krb5_keytab that the TGT obtained has not been spoofed. The keytab is checked for entries sequentially, and the first entry with a matching realm is used for validation. If no entry matches the realm, the last entry in the keytab is used. This process can be used to validate environments using cross-realm trust by placing the appropriate keytab entry as the last entry or the only entry in the keytab file.
|
|
|
type: Content of: <variablelist><varlistentry><listitem><para>
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
include/krb5_options.xml:20
|
|
|
2642.
|
|
|
krb5_renewable_lifetime (string)
|
|
|
type: Content of: <variablelist><varlistentry><term>
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
include/krb5_options.xml:35
|
|
|
2643.
|
|
|
Request a renewable ticket with a total lifetime, given as an integer immediately followed by a time unit:
|
|
|
type: Content of: <variablelist><varlistentry><listitem><para>
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
include/krb5_options.xml:38
|
|
|
2644.
|
|
|
<emphasis>s</emphasis> for seconds
|
|
|
type: Content of: <variablelist><varlistentry><listitem><para>
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
include/krb5_options.xml:43 include/krb5_options.xml:77
include/krb5_options.xml:114
|
|
|
2645.
|
|
|
<emphasis>m</emphasis> for minutes
|
|
|
type: Content of: <variablelist><varlistentry><listitem><para>
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
include/krb5_options.xml:46 include/krb5_options.xml:80
include/krb5_options.xml:117
|
|
|
2646.
|
|
|
<emphasis>h</emphasis> for hours
|
|
|
type: Content of: <variablelist><varlistentry><listitem><para>
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
include/krb5_options.xml:49 include/krb5_options.xml:83
include/krb5_options.xml:120
|
|
|
2647.
|
|
|
<emphasis>d</emphasis> for days.
|
|
|
type: Content of: <variablelist><varlistentry><listitem><para>
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
include/krb5_options.xml:52 include/krb5_options.xml:86
include/krb5_options.xml:123
|
|
|
2648.
|
|
|
If there is no unit given, <emphasis>s</emphasis> is assumed.
|
|
|
type: Content of: <variablelist><varlistentry><listitem><para>
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
include/krb5_options.xml:55 include/krb5_options.xml:126
|
|
|
2649.
|
|
|
NOTE: It is not possible to mix units. To set the renewable lifetime to one and a half hours, use '90m' instead of '1h30m'.
|
|
|
type: Content of: <variablelist><varlistentry><listitem><para>
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
include/krb5_options.xml:59 include/krb5_options.xml:130
|
|
|
2650.
|
|
|
Default: not set, i.e. the TGT is not renewable
|
|
|
type: Content of: <variablelist><varlistentry><listitem><para>
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
include/krb5_options.xml:64
|
