configure identity-management kerberos snooping force-aging time
configure identity-management
kerberos snooping force-aging time [none | minutes]
Description
Configures the switch to remove all Kerberos snooping entries after the specified time expires.
Syntax Description
minutes |
Specifies the aging time in minutes. The range is 1 to 65535 minutes. |
none |
Disables the Kerberos force-aging feature. |
Default
N/A.
Usage Guidelines
If Kerberos force aging is enabled, we recommend that the Kerberos snooping force aging time be set to the same value as the Kerberos ticket lifetime.
Example
The following command removes all Kerberos snooping entries after 600 minutes:
* Switch.4 # configure identity-management kerberos snooping force-aging time 600
History
This command was first available in ExtremeXOS 12.6.
Platform Availability
This command is available on all platforms.