1<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN"> 2<html><head> 3<meta name="GENERATOR" content="Microsoft� HTML Help Workshop 4.1"> 4<link rel="stylesheet" type="text/css" href="Leash.css"> 5<title>Troubleshooting</title></head> 6 7<body> 8<h1> <a name="" top="">Troubleshooting</a></h1> 9<ul id="helpul"> 10<li> <a href="#renew"> When I try to renew my ticket, why do I get an error message and see the Get Ticket window? </a></li> 11<li><a href="#expire"> Why did my tickets expire even though I had Automatically Renew Tickets turned on? </a></li> 12 13<li> <a href="#ticket-lifetime"> Why doesn't my ticket lifetime match the lifetime I selected with the slider in the Get Ticket window? </a></li> 14 15 16 17<li> <a href="#set-preferences"> How do I set properties like the default ticket lifetime? </a></li> 18<li> <a href="#set-preferences"> I have multiple principals and have 19tickets for all of them, but sometimes an application that requires 20Kerberos doesn't work. What's going on? </a></li> 21</ul> 22 23 24<a name="renew"> <h3> When I try to renew my ticket, why do I get an error message and see the Get Ticket window? </h3> </a> 25<p> 26The ticket cannot be renewed. This could be because the ticket was not 27flagged as renewable when you obtained it, or because it expired before 28you could renew it, or because the ticket's renewable lifetime has been 29reached. <a href="HTML/Tickets.htm#renewable">About: Renewable Tickets</a> </p> 30<p> 31<a href="#top">Back to top</a></p> 32 33<a name="expire"> </a><h3><a name=" expire"> Why did my tickets expire even though I had Automatically Renew Tickets turned on? </a></h3> 34<p> MIT Kerberos can only renew your tickets if the program is running 35and active. It cannot renew your tickets if you exit the program or if 36your computer is turned off or in hibernation mode.</p> 37<p> 38<a href="#top">Back to top</a></p> 39 40<a name="ticket-lifetime"> </a><h3><a name="ticket-lifetime"> Why doesn't my ticket lifetime match the lifetime I selected with the slider in the Get Ticket window? </a></h3> 41<p> Your Kerberos installation is configured for a maximum ticket 42lifetime length that is determined by the administrators. If your 43installation uses a shorter maximum ticket lifetime than the default, 44the Ticket Lifetime slider might show the default maximum instead of 45the actual maximum.</p> 46<p> For example, if your Kerberos installation has been configured to 47issue tickets that expire in 5 hours or less, you might be able to move 48the slider to show 12 hours but you would still be issued a ticket with 49a lifetime of only 5 hours.</p> 50<p> 51<a href="#top">Back to top</a></p> 52 53 54<h3> <a name="set-preferences"> How do I set properties like the default ticket lifetime?</a></h3> 55<p> 56You cannot use the MIT Kerberos program to set properties such as 57default ticket lifetimes. Instead, edit the appropriate configuration 58file. For more information, visit the <a href="https://web.mit.edu/kerberos/krb5-latest/doc/krb_admins/conf_files/index.html" target="new"> MIT Kerberos documentation site. </a> 59 </p> 60<p> 61<a href="#top">Back to top</a></p> 62 63<h3> <a name="default-principal"> I have multiple principals and have 64tickets for all of them, but sometimes an application that requires 65Kerberos doesn't work. What's going on? </a></h3> 66<p> 67When you try to use a Keberized application, it requests your 68credentials from Kerberos. Some applications do this by asking for a 69specific principal's credentials, but others ask generically. When 70applications make a generic request, Kerberos does not know which 71principal is being authenticated and checks the default principal for 72tickets. If the default principal is not the one being authenticated, 73the application will usually simply fail to work with no warning or 74notice. <a href="HTML/Make_Default.htm">How to: Make Default Principal</a> 75 76 77 </p> 78<p> 79<a href="#top">Back to top</a></p> 80</body></html> 81