Vas.conf file follows the standard krb5.conf format used by both the Heimdal and MIT Kerberos projects. It can be used as a krb5.conf file by other applications. All settings available are in the vas.conf man page.
1 - We edited the /etc/opt/quest/vas/vas/vas.conf and under the section [libdefaults] we add the following setting:
renew_lifetime = 15d
Please note that Active Directory settings for kerberos will take precedent over vas.conf settings.
USEFUL TROUBLESHOOTING KERBEROS COMMANDS:
1 - After logging on as a user list the kerberos ticket with the following commands:
2 - To obtain a ticket use the following command when logged in as user: