Set max_renewable_life = 7d in KDC realm config

Jimvin · web-flow · commit 6e62ef45ef80 · 2025-09-04T10:17:49.000+01:00
Setting max_renewable_life = 7d means by default tickets will be renewable for 7 days. This is useful for applications that expect tickets to be renewable as part of their ticket lifecycle management.
diff --git a/stacks/end-to-end-security/krb5.yaml b/stacks/end-to-end-security/krb5.yaml
@@ -122,6 +122,7 @@ data:
     KNAB.COM = {
      acl_file = /stackable/config/kadm5.acl
      disable_encrypted_timestamp = false
+     max_renewable_life = 7d
     }
     [domain_realm]
     .cluster.local = KNAB.COM

Original file line number	Diff line number	Diff line change
`@@ -122,6 +122,7 @@ data:`
`122`	`122`	`KNAB.COM = {`
`123`	`123`	`acl_file = /stackable/config/kadm5.acl`
`124`	`124`	`disable_encrypted_timestamp = false`
	`125`	`+ max_renewable_life = 7d`
`125`	`126`	`}`
`126`	`127`	`[domain_realm]`
`127`	`128`	`.cluster.local = KNAB.COM`