Store Commands
225
Sets the maximum allowable ticket lifetime in seconds, minutes,
hours, or days:
store kerberos config tktlife <LIFE_TIME> <s|m|h|d>
<life_time> is between 300 seconds and 259200 seconds (3
days). The time units cannot be mixed and there must be at
least one space between the <life_time> value and the time
units (s, m, h, or d). Default value is 43200 seconds.
Sets the maximum allowable renewable lifetime in seconds,
minutes, hours, or days:
store kerberos config renewlife <RENEW_LIFE_TIME>
<s|m|h|d>
<renew_life_time> is 0 (i.e. no limit) or between 300 seconds
and 604800 seconds (7 days). The time units cannot be mixed
and there must be at least one space between the
<renew_life_time> value and the time unit (s, m, h, or d).
Default value is 0.
Configures the KDC port:
store kerberos config kport <KDC_PORT>
<kdc_port> is the 2-byte UPD/TCP port used for Kerberos
communication. Default is 88.
Configures the KDC name portion of the service principal:
store kerberos config kname <KDC_NAME>
<kdc_name> has a maximum of 127 characters excluding
“:” and “/”. Default is krbtgt.
Configures the KDC realm portion:
store kerberos config krealm <KDC_REALM>
<kdc_realm> is usually set to the uppercase name of the
Windows 2000 KDC to which the Access Point is configured.
<kdc_realm> has 0 to 127 characters excluding “:” and “/”.
Default is localrealm.