fkinit: Request ticket with 28 hour lifetime

This is the maximum lifetime currently allowed by the Fedora KDC.

Having a ticket with a lifetime longer than 24 hours makes the ticket easier to renew if one logs into ones computer at around the same time every day.
This commit is contained in:
Peter Oliver 2026-06-19 12:55:47 +01:00
commit feff4cf268

2
fkinit
View file

@ -112,7 +112,7 @@ kinit -n @$domain -c FILE:$armorcache
F_PASSWORD=$(systemd-ask-password --timeout=0 "FAS password:")
F_OTP=${FKINIT_OTP:-$(systemd-ask-password --timeout=0 "FAS OTP (leave blank if not configured):")}
kinit -T FILE:$armorcache $_arg_user@$domain <<< "${F_PASSWORD}${F_OTP}" >/dev/null
kinit -T FILE:$armorcache -l 28h $_arg_user@$domain <<< "${F_PASSWORD}${F_OTP}" >/dev/null
unset F_PASSWORD
unset F_OTP