Keywords › MAXTKTLF Keyword—Specify Maximum Ticket Life

MAXTKTLF Keyword—Specify Maximum Ticket Life

Valid on z/OS.

Use the MAXTKTLF keyword to specify the maximum ticket life in the KERBDFLT REALM record in the SDT, or when defining local principals in the user's security record.

When used in the local realm, this keyword has the following format:

TSS ADDTO(SDT) REALM(KERBDFLT) 
               REALMNAME('kerberos‑realm‑name')
               MINTKTLF(max‑ticket‑life)
               MAXTKTLF(max‑ticket‑life)
               DEFTKTLF(default‑ticket‑life)
               KERBPASS(kerberos‑password)

When used in local principal, this keyword has the following format:

TSS ADDTO(acid) KERBNAME('kerberos‑principal‑name')
                MAXTKTLF(max‑ticket‑life)

max‑ticket‑life

The maximum ticket life in seconds. Specify a value between 1 and 2,147,483,647. Zero is not valid.

When used to define the local realm's maximum ticket life, DEFTKTLF and MINTKTLF must be specified. If only one is specified, a message is generate. See DEFTKTLF and MINTKTLF keywords for additional information.

When used to define the local principal's maximum ticket life, an entry here will override the entry in the REALM MAXTKTLF record. DEFTKTLF and MINTKTLF keywords are not required for local principals.

This keyword is not used for foreign realms.

This keyword is used with:

• The commands ADDTO, DELETE, REMOVE, and REPLACE
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• MISC3(SDT) authority to ADDTO or REMOVE records or fields in the SDT
• MISC8(LISTSDT) authority to list MAXTKTLF in the SDT

Examples: MAXTKTLF keyword

This example indicates a maximum ticket life of 24 hours in the default REALM SDT record:

TSS ADDTO(SDT) REALM(KERBDFLT)
               REALMNAME('LOCAL.CA.COM')
               MINTKTLF(30)
               MAXTKTLF(86400)
               DEFTKTLF(36000)
               KERBPASS(CHILDREN)

This example changes the maximum ticket life:

TSS REPLACE(SDT) REALM(KERBDFLT)
                 MAXTKTLF(94000)
                 DEFTKTLF(36000)
                 MINTKTLF(30)