configure identity-management kerberos snooping force-aging time

configure identity-management kerberos snooping force-aging time [none | minutes]

Description

Configures the switch to remove all Kerberos snooping entries after the specified time expires.

Syntax Description

minutes

Specifies the aging time in minutes. The range is 1 to 65535 minutes.

none

Disables the Kerberos force-aging feature.

Default

N/A.

Usage Guidelines

If Kerberos force aging is enabled, we recommend that the Kerberos snooping force aging time be set to the same value as the Kerberos ticket lifetime.

Example

The following command removes all Kerberos snooping entries after 600 minutes:

* Switch.4 # configure identity-management kerberos snooping force-aging time 600

History

This command was first available in ExtremeXOS 12.6.

Platform Availability

This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X620, X690, X870 series switches.