Set max_renewable_life = 7d in KDC realm config (#300)

Jimvin · NickLarsenNZ · web-flow · commit bc99e3bc6454 · 2025-11-13T10:10:59.000Z
Setting max_renewable_life = 7d means by default tickets will be renewable for 7 days. This is useful for applications that expect tickets to be renewable as part of their ticket lifecycle management.

Co-authored-by: Nick &lt;10092581+NickLarsenNZ@users.noreply.github.com&gt;
diff --git a/stacks/end-to-end-security/krb5.yaml b/stacks/end-to-end-security/krb5.yaml
@@ -122,6 +122,7 @@ data:
     KNAB.COM = {
      acl_file = /stackable/config/kadm5.acl
      disable_encrypted_timestamp = false
+     max_renewable_life = 7d
     }
     [domain_realm]
     .cluster.local = KNAB.COM

Original file line number	Diff line number	Diff line change
`@@ -122,6 +122,7 @@ data:`
`122`	`122`	`KNAB.COM = {`
`123`	`123`	`acl_file = /stackable/config/kadm5.acl`
`124`	`124`	`disable_encrypted_timestamp = false`
	`125`	`+ max_renewable_life = 7d`
`125`	`126`	`}`
`126`	`127`	`[domain_realm]`
`127`	`128`	`.cluster.local = KNAB.COM`