MAXTKTLF Keyword—Specify Maximum Ticket Life

Keywords › MAXTKTLF Keyword—Specify Maximum Ticket Life

MAXTKTLF Keyword—Specify Maximum Ticket Life

Valid on z/OS.

Use the MAXTKTLF keyword:

To specify the maximum ticket life in the KERBDFLT REALM record in the SDT
When defining local principals in the security record of the user

When used in the local realm, this keyword has the following format:

TSS ADDTO(SDT) REALM(KERBDFLT)
               REALMNAME('kerberos‑realm‑name')
               MINTKTLF(max‑ticket‑life)
               MAXTKTLF(max‑ticket‑life)
               DEFTKTLF(default‑ticket‑life)
               KERBPASS(kerberos‑password)
               CHKADDRS

When used in local principal, this keyword has the following format:

TSS ADDTO(acid) KERBNAME('kerberos‑principal‑name')
                MAXTKTLF(max‑ticket‑life)

max‑ticket‑life

Specifies the maximum ticket life in seconds.

When this keyword is used to define the maximum ticket life of the local realm, the DEFTKTLF and MINTKTLF keywords must also be specified. If only one of these keywords is specified, an error message is displayed. For additional information, see DEFTKTLF and MINTKTLF keywords.

When used to define the maximum ticket life of the local principle, this entry overrides the entry in the REALM MAXTKTLF record. DEFTKTLF and MINTKTLF keywords are not required for local principals.

This keyword is not used for foreign realms.

Limits: 1 - 2,147,483,647. Zero is not valid.

This keyword is used with:

The commands ADDTO, REMOVE, and REPLACE
The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
MISC3(SDT) authority to ADDTO or REMOVE records or fields in the SDT
MISC8(LISTSDT) authority to list MAXTKTLF in the SDT

Examples: MAXTKTLF keyword

This example indicates a maximum ticket life of 24 hours in the default REALM SDT record:

TSS ADDTO(SDT) REALM(KERBDFLT)
               REALMNAME('LOCAL.CA.COM')
               MINTKTLF(30)
               MAXTKTLF(86400)
               DEFTKTLF(36000)
               KERBPASS(CHILDREN)
               CHKADDRS

This example changes the maximum ticket life:

TSS REPLACE(SDT) REALM(KERBDFLT)
                 MAXTKTLF(94000)
                 DEFTKTLF(36000)
                 MINTKTLF(30)
                 CHKADDRS