Can you change the passticket lifespan in CA Top Secret?
Article ID: 129516
CA Top Secret
CA Top Secret - LDAP
Certificate passticket lifespan.
When generating a passticket, is the lifespan of the certificate configurable? Are there any limitation with SIGNMULTI which allows the passticket to be used more than once during its lifespan?
IBM RACF Callable Service r_ticketserv and r_gensec is used to create the passticket and not CA Top Secret.
r_gensec and r_ticketserv currently dont have any parm setting that allows you to change the lifespan of a passticket which is about 10 minutes. The lifespan cannot be changed.
There are no restictions with SIGNMULTI during the passtickets lifespan. It can be used as many times within the same LPAR/system.