The default is 100 hours. The maximum ticket lifetime recorded for the user in the Authentication Database entry for the issuer. The default is 25 hours for user entries created by an Authentication Server running AFS 3.1 or later. The maximum ticket lifetime recorded in the krbtgt. The output from the kas examine command displays an Authentication Database entry's maximum ticket lifetime as Max ticket lifetime .
Administrators can display any entry, and users can display their own entries.
If none of the defaults have been changed, the token lifetime is 25 hours for user accounts created by an Authentication Server running AFS 3.1 or higher. Between the minimum and maximum values, the Authentication Server uses a defined set of values, according to the following rules. Requested lifetimes between 5 minutes and 10 hours 40 minutes are granted at 5 minute intervals, rounding up. For example, if the issuer requests a lifetime of 12 minutes, the token's actual lifetime is 15 minutes. The Authentication Server rounds up a requested lifetime to the next highest possible lifetime.