Add code to be able to set default kinit lifetime

This is done by setting the kinit_lifetime option in default.conf
to a value that can be passed in with the -l option syntax of kinit.

https://pagure.io/freeipa/issue/7001

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Pavel Vomacka <pvomacka@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
This commit is contained in:
Simo Sorce
2017-06-05 09:50:22 -04:00
committed by Martin Basti
parent 117d6e9be0
commit 77db574cca
4 changed files with 8 additions and 2 deletions

View File

@@ -969,7 +969,8 @@ class login_password(Backend, KerberosSession):
password,
ccache_name,
armor_ccache_name=armor_path,
enterprise=True)
enterprise=True,
lifetime=self.api.env.kinit_lifetime)
if armor_path:
self.debug('Cleanup the armor ccache')