The 'vastool kinit' command does not have the -l option to reduce the default ticket lifetime.
WORKAROUND 1:
Use a copy of the vas.conf file with a reduced ticket lifetime and point the 'vastool kinit' command at this file using the KRB5_CONFIG variable:
-------------------------------
$ cp /etc/opt/quest/vas/vas.conf /tmp/vas.conf
$ vastool configure -f /tmp/vas.conf vas libdefaults ticket_lifetime 30m
$ KRB5_CONFIG=/tmp/vas.conf vastool kinit user1
Password for user1@DOMAIN.COM:
$ vastool klist -v
-------------------------------
WORKAROUND 2:
Create a symbolic link between /etc/krb5.conf and /etc/opt/quest/vas/vas.conf.
Then use the operating system kinit command with the -l option:
---------------------------------
# ln -s /etc/opt/quest/vas/vas.conf /etc/krb5.conf
# ls -la /etc/krb5.conf
lrwxrwxrwx 1 root root 10 Oct 20 2018 /etc/krb5.conf -> /etc/opt/quest/vas/vas.conf
# kinit -l 30m user1
# klist
---------------------------------
STATUS:
Enhancement request 788462 has been submitted to Development for consideration in a future release of Authentication Services.