freeipa

#7333 Need to document kinit_lifetime in /etc/ipa/default.conf
Closed: fixed Opened by frenaud.

Closed: fixed
Reopen Issue

Issue

the man page for default.conf mentions setting session_auth_duration and session_duration_type but these parameters are not relevant anymore after the introduction of privilege separation (tickets #5959 and #7001)

The man page should rather describe the parameter kinit_lifetime that allows to limit the lifetime of ticket obtained by users authenticating to the WebGUI using login/password.

PR:https://github.com/freeipa/freeipa/pull/1425

Targeting ipa-4-5 as the change was introduced in 4.5.2

Metadata Update from @frenaud:
- Issue set to the milestone: FreeIPA 4.5.5

master:

  • 5c361f5450294e9d7b187112cbcb3b08bd037ae5 Documenting kinit_lifetime in /etc/ipa/default.conf

ipa-4-6:

  • af038534cc08e52f3862880450a8d4d0e977100d Documenting kinit_lifetime in /etc/ipa/default.conf

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.