z/OS Security Server RACF Messages and Codes
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


IRR52167I

z/OS Security Server RACF Messages and Codes
SA23-2291-00

IRR52167I
Unable to validate MINTKTLFE, MAXTKTLFE, and DEFTKTLFE. Ticket lifetime values are ignored.

Explanation

Specified values for ticket lifetime (MINTKTLFE, MAXTKTLFE, or DEFTKTLFE) cannot be validated and are ignored. Validation requires all three ticket lifetime values. However, one or more ticket lifetime values cannot be determined.

System action

Ticket lifetime values are ignored.

User response

Determine which ticket lifetime values are required and reissue the command using the following guidelines:
  • For the RDEFINE command, all three ticket lifetime values (MINTKTLFE, MAXTKTLFE, and DEFTKTLFE) must be specified together on the same command.
  • For the RALTER command, if the ticket lifetime values are being initially defined, all three values (MINTKTLFE, MAXTKTLFE, and DEFTKTLFE) must be specified together on the same command.
  • For the RALTER command, if previously defined ticket lifetime values are being changed, any undefined values (MINTKTLFE, MAXTKTLFE, or DEFTKTLFE) must be specified together on the same command.

    If ticket lifetime values are previously defined for this local Kerberos realm, the RALTER command may be used to alter one or more of them, but if any one of them is deleted by using the NOMINTKTLFE, NOMAXTKTLFE, or NODEFTKTLFE operand, this ticket lifetime value is no longer defined and must be included on the same RALTER command. Use the RLIST command to determine undefined values.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014