What problems might I cause by changing the expiration time or password lifespan in a running cell?
DCE v1.1 will not let you authenticate (acquire a TGT) with an expired password. As such, if you change the “password lifespan” policy from “never” or a period longer than 30 days, to days, then every host principal, user and server account that has not (by coincidence) updated their password/key within the last 30 days, will be locked out. Users would not be able to log in, server applications would no longer be able to obtain credentials and the dceds would no longer be able to obtain/refresh their machine credentials.
Related Questions
- Why does running some Coral applications appear to cause cell/packet loss when the applications are run for a short durations?
- What problems might I cause by changing the expiration time or password lifespan in a running cell?
- Does changing the local admin password on Cisco IP ICD server cause problems with the application?
