# cat /etc/krb5.conf|grep lifetime ticket_lifetime = 600 This parameter is not defined in the manpage. Perhaps the author meant to write: renew_lifetime? Reproducible: Always Steps to Reproduce: 1. n/a 2. 3. Actual Results: see details Expected Results: see details tombstone etc # emerge info Portage 2.0.50-r8 (default-x86-2004.0, gcc-3.3.2, glibc-2.3.2-r9, 2.4.25-gentoo-r2) ================================================================= System uname: 2.4.25-gentoo-r2 i686 Intel(R) Xeon(TM) CPU 2.40GHz Gentoo Base System version 1.4.3.13 distcc 2.13 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled] ccache version 2.3 [enabled] Autoconf: sys-devel/autoconf-2.58-r1 Automake: sys-devel/automake-1.8.3 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer" CHOST="i686-pc-linux-gnu" COMPILER="gcc3" CONFIG_PROTECT="/etc /etc/tomcat /usr/X11R6/lib/X11/xkb /usr/kde/2/share/config /usr/kde/3/share/config /usr/share/config /usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/ /var/bind /var/qmail/control" CONFIG_PROTECT_MASK="/etc/afs/C /etc/afs/afsws /etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer" DISTDIR="/usr/portage/distfiles" FEATURES="autoaddcvs ccache sandbox" GENTOO_MIRRORS="ftp://vlaai.snt.ipv6.utwente.nl/pub/os/linux/gentoo/ http://128.213.5.34/gentoo/ http://mirror.datapipe.net/gentoo" MAKEOPTS="-j5" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.namerica.gentoo.org/gentoo-portage" USE="acl afs apache2 apm avi berkdb crypt cups doc emacs emacs-w3 encode esd ethereal firebird flac foomaticdb gdbm gif gpm gtk gtk2 guile icq imap imlib innodb ipv6 jabber jack java jpeg kerberos krb4 ldap libg++ libwww mad maildir mcal mikmod motif mpeg mysql ncurses nls oggvorbis opengl oss pam pdflib perl png ppds prelude python quicktime readline ruby samba sasl sdl slang spell sse ssl svga tcpd tetex truetype unicode usb vhosts x86 xml2 xmms xv zeo zlib"
Also, this section in krb5.conf is not defined in the manpage for krb5.conf [kdc] and the "profile" parameter within it is also not defined in the manpage for krb5.conf
You should better ask on mit-krb5 email list for help. It is a bit unfortunate that many documents hanging on internet mix together heimdals /etc/krb5.conf syntax with mit-krb5 syntax. Mostly they are same but there are some differences ... in a quick search, there are MIT krb5 specific for kadmin section: [kadmin] default_keys = des:pw-salt v4 default_etypes = des-cbc-crc:normal des-cbc-crc:v4 des-cbc-crc: On the other hand, docs are not often up-to-date, so are you sure it not used? Any error messages? Please note I use heimdal so I know about mit krb5 just from people on openfs email lists. ;)
fixed, thanks.
