I have started with configuring kerberos.

Can anyone explain the ticket lifetime and renew lifetime we set in the krb5.conf file.

ticket_lifetime = 2d  
renew_lifetime = 7d

Is it like

  1. After 2 days client will get the new renewed ticket ?
  2. After 7 days do i need to create the key tabs again and send to client machines?
kerberos
Edit
Report