Check: AD.4032_2008
Win2k8 Audit:
AD.4032_2008
(in version v6 r1.22)
Title
The Kerberos policy option Maximum lifetime for user ticket renewal must be configured for a maximum of 7 days or less. (Cat II impact)
Discussion
This setting determines the period of time (in days) during which a users ticket-granting ticket (TGT) may be renewed.
Check Content
Fix Text
Configure the Kerberos policy option "Maximum lifetime for user ticket renewal" to a maximum of 7 days or less.
Additional Identifiers
Rule ID: SV-28501r1_rule
Vulnerability ID: V-2379
Group Title: Kerberos-User Ticket Renewal
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| No CCIs are assigned to this check |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| No controls are assigned to this check |