title: Reset the maxlife of a kerberos ticket more than 24h
body: <p>I am using MIT kerberos 5 on my machine to authenticate a user. This grants the ticket to the user. I want to reset the maxlife of a ticket for more than 24 hrs. By default the max life of a kerberos ticket is 24 hrs. I have tried the following steps:</p>
  
  <ol>
  <li>Changed the <code>/var/kerberos/krb5kdc/kdc.conf</code>
    I did not find max-life so I set <code>max_life = 168h 0m 0s</code></li>
  <li>Changed the <code>/etc/krb5.conf</code>
    Changed the default ticket_lifetime from 24 hrs to
    <code>ticket_lifetime = 168h 0m 0s</code></li>
  <li>By default the principal lifetime is Maximum ticket life: 1 days 00:00:00</li>
  <li><p>I changed it to 168h with the following command</p>
  
  <pre><code>kadmin.local:  modify_principal -maxlife 168hours testkerb
  </code></pre></li>
  <li><p>It changed to - Maximum ticket life: 7 days 00:00:00</p></li>
  <li>Then I did a <code>kinit</code> for the user and check with <code>klist</code>.</li>
  </ol>
  
  <p>The <code>klist</code> result still shows the ticket life as 24 hrs. Output of <code>klist</code> is as follows:</p>
  
  <pre><code>Valid starting     Expires            Service principal
  **11/19/14 12:51:59  11/20/14 12:51:59  krbtgt/EXAMPLE.COM@EXAMPLE.COM**
      renew until 11/19/14 12:51:59
  </code></pre>
  
  <p>If someone knows please tell me where am I doing the mistake. Less than 24 hrs I am able to change the ticket life but more than 24 hrs it does not reflect in the <code>klist</code>. I would appreciate the help.</p>