From cab25b66cc76c009729e95c3ab4bcf063f8161cf Mon Sep 17 00:00:00 2001
From: Lars Beckers <lars.beckers@rwth-aachen.de>
Date: Sun, 14 May 2017 23:39:59 +0200
Subject: [PATCH] ad-auth: configure ticket lifetime and renewal

---
 ad-auth/templates/sssd.conf.j2 | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ad-auth/templates/sssd.conf.j2 b/ad-auth/templates/sssd.conf.j2
index 67704c2..c729bce 100644
--- a/ad-auth/templates/sssd.conf.j2
+++ b/ad-auth/templates/sssd.conf.j2
@@ -22,3 +22,6 @@ fallback_homedir = /home/%u
 access_provider = ad
 enumerate = true
 ldap_user_fullname = displayName
+krb5_lifetime = 48h
+krb5_renewable_lifetime = 200h
+krb5_renew_interval = 30m
-- 
GitLab