Can you change the passticket lifespan in CA Top Secret?
Article ID: 129516
Updated On:
Products
Top Secret
Top Secret - LDAP
Issue/Introduction
Certificate passticket lifespan.
When generating a passticket, is the lifespan of the certificate configurable? Are there any limitation with SIGNMULTI which allows the passticket to be used more than once during its lifespan?
When generating a passticket, is the lifespan of the certificate configurable? Are there any limitation with SIGNMULTI which allows the passticket to be used more than once during its lifespan?
Environment
Release:
Component: TSSMVS
Component: TSSMVS
Resolution
IBM RACF Callable Service r_ticketserv and r_gensec is used to create the passticket and not CA Top Secret.
r_gensec and r_ticketserv currently dont have any parm setting that allows you to change the lifespan of a passticket which is about 10 minutes. The lifespan cannot be changed.
There are no restictions with SIGNMULTI during the passtickets lifespan. It can be used as many times within the same LPAR/system.
r_gensec and r_ticketserv currently dont have any parm setting that allows you to change the lifespan of a passticket which is about 10 minutes. The lifespan cannot be changed.
There are no restictions with SIGNMULTI during the passtickets lifespan. It can be used as many times within the same LPAR/system.
Feedback
Yes
No
Powered by
