configure identity-management kerberos snooping force-aging time

configure identity-management kerberos snooping force-aging time [none | minutes]

Description

Configures the switch to remove all Kerberos snooping entries after the specified time expires.

Syntax Description


`minutes`	Specifies the aging time in minutes. The range is 1 to 65535 minutes.
none	Disables the Kerberos force-aging feature.

Default

N/A.

Usage Guidelines

If Kerberos force aging is enabled, we recommend that the Kerberos snooping force aging time be set to the same value as the Kerberos ticket lifetime.

Example

The following command removes all Kerberos snooping entries after 600 minutes:

* Switch.4 # configure identity-management kerberos snooping force-aging time 600

History

This command was first available in ExtremeXOS 12.6.

Platform Availability

This command is available on ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, X670-G2, X690, X695, X870, 5320, 5420, and 5520 series switches.