Documenting kinit_lifetime in /etc/ipa/default.conf

Describing the parameter kinit_lifetime that allows to limit the lifetime of ticket obtained by users authenticating to the WebGUI using login/password. Removing session_auth_duration and session_duration_type since these parameters are not relevant anymore.

Resolves: https://pagure.io/freeipa/issue/7333
Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
This commit is contained in:
amitkuma
2018-01-12 20:33:20 +01:00
committed by Florence Blanc-Renaud
parent 0cab090f4d
commit 5c361f5450
4 changed files with 3 additions and 15 deletions
-5
View File
@@ -157,11 +157,6 @@ DEFAULT_CONFIG = (
('webui_prod', True),
# Session stuff:
# Maximum time before a session expires forcing credentials to be reacquired.
('session_auth_duration', '20 minutes'),
# How a session expiration is computed, see SessionManager.set_session_expiration_time()
('session_duration_type', 'inactivity_timeout'),
('kinit_lifetime', None),
# Debugging: