xref: /freebsd/crypto/krb5/src/windows/leash/htmlhelp/html/Troubleshooting.htm (revision 7f2fe78b9dd5f51c821d771b63d2e096f6fd49e9)
1<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
2<html><head>
3<meta name="GENERATOR" content="Microsoft� HTML Help Workshop 4.1">
4<link rel="stylesheet" type="text/css" href="Leash.css">
5<title>Troubleshooting</title></head>
6
7<body>
8<h1> <a name="" top="">Troubleshooting</a></h1>
9<ul id="helpul">
10<li> <a href="#renew">  When I try to renew my ticket, why do I get an error message and see the Get Ticket window? </a></li>
11<li><a href="#expire">   Why did my tickets expire even though I had Automatically Renew Tickets turned on?  </a></li>
12
13<li> <a href="#ticket-lifetime">  Why doesn't my ticket lifetime match the lifetime I selected with the slider in the Get Ticket window?  </a></li>
14
15
16
17<li> <a href="#set-preferences">  How do I set properties like the default ticket lifetime?  </a></li>
18<li> <a href="#set-preferences"> I have multiple principals and have
19tickets for all of them, but sometimes an application that requires
20Kerberos doesn't work. What's going on? </a></li>
21</ul>
22
23
24<a name="renew">  <h3> When I try to renew my ticket, why do I get an error message and see the Get Ticket window? </h3> </a>
25<p>
26The ticket cannot be renewed. This could be because the ticket was not
27flagged as renewable when you obtained it, or because it expired before
28you could renew it, or because the ticket's renewable lifetime has been
29reached. <a href="HTML/Tickets.htm#renewable">About: Renewable Tickets</a> </p>
30<p>
31<a href="#top">Back to top</a></p>
32
33<a name="expire">  </a><h3><a name=" expire">  Why did my tickets expire even though I had Automatically Renew Tickets turned on?  </a></h3>
34<p> MIT Kerberos can only renew your tickets if the program is running
35and active. It cannot renew your tickets if you exit the program or if
36your computer is turned off or in hibernation mode.</p>
37<p>
38<a href="#top">Back to top</a></p>
39
40<a name="ticket-lifetime">  </a><h3><a name="ticket-lifetime"> Why doesn't my ticket lifetime match the lifetime I selected with the slider in the Get Ticket window?  </a></h3>
41<p> Your Kerberos installation is configured for a maximum ticket
42lifetime length that is determined by the administrators. If your
43installation uses a shorter maximum ticket lifetime than the default,
44the Ticket Lifetime slider might show the default maximum instead of
45the actual maximum.</p>
46<p> For example, if your Kerberos installation has been configured to
47issue tickets that expire in 5 hours or less, you might be able to move
48the slider to show 12 hours but you would still be issued a ticket with
49a lifetime of only 5 hours.</p>
50<p>
51<a href="#top">Back to top</a></p>
52
53
54<h3> <a name="set-preferences"> How do I set properties like the default ticket lifetime?</a></h3>
55<p>
56You cannot use the MIT Kerberos program to set properties such as
57default ticket lifetimes. Instead, edit the appropriate configuration
58file. For more information, visit the <a href="https://web.mit.edu/kerberos/krb5-latest/doc/krb_admins/conf_files/index.html" target="new"> MIT Kerberos documentation site. </a>
59 </p>
60<p>
61<a href="#top">Back to top</a></p>
62
63<h3>  <a name="default-principal"> I have multiple principals and have
64tickets for all of them, but sometimes an application that requires
65Kerberos doesn't work. What's going on? </a></h3>
66<p>
67When you try to use a Keberized application, it requests your
68credentials from Kerberos. Some applications do this by asking for a
69specific principal's credentials, but others ask generically. When
70applications make a generic request, Kerberos does not know which
71principal is being authenticated and checks the default principal for
72tickets. If the default principal is not the one being authenticated,
73the application will usually simply fail to work with no warning or
74notice. <a href="HTML/Make_Default.htm">How to: Make Default Principal</a>
75
76
77 </p>
78<p>
79<a href="#top">Back to top</a></p>
80</body></html>
81