No ticket can be renewed after this time. Settings are in minutes. The KDC server's clock and the Kerberos client's clock have to be synchronized to within a specified number of minutes. If the clocks are not synchronized within the specified number of minutes, tickets are not issued to the client. This is a deterrent in Replay attacks.
Settings are in minutes.
All rights reserved. Terms of Use. No Did not apply Please provide additional comments about this information.