set max_life default to 10 hours, not zero

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9092 dc483132-0cff-0310-8789-dd5450dbe970

2 files changed, 14 insertions, 4 deletions

diff --git a/doc/kadm5/api-funcspec.tex b/doc/kadm5/api-funcspec.tex
index 2f01871c0a..91e7c02f81 100644
--- a/doc/kadm5/api-funcspec.tex
+++ b/doc/kadm5/api-funcspec.tex
@@ -484,10 +484,14 @@ work with a NULL value.
 encryption type of the master principal.  The default is
 DEFAULT_KDC_ENCTYPE.
 
-\item[max_life, max_rlife, expiration, flags] Variables: max_life,
-max_renewable_life, default_principal_expiration,
-default_principal_flags.  MAX_LIFE, MAX_RLIFE, EXPIRATION, FLAGS.
-Server.  Default values for new principals.  All default to 0.
+\item[max_life] Variable: max_life.  MAX_LIFE.  Maximum lifetime for
+all tickets issued to the principal.  The default is 28800, which is 8
+hours.
+
+\item[max_rlife, expiration, flags] Variables: max_renewable_life,
+default_principal_expiration, default_principal_flags.  MAX_LIFE,
+MAX_RLIFE, EXPIRATION, FLAGS.  Server.  Default values for new
+principals.  All default to 0.
 
 \item[keysalts, num_keysalts] Variable: supported_enctypes.  ENCTYPES.
 Server.  The list of supported encryption type/salt type tuples; both
diff --git a/doc/kadm5/api-unit-test.tex b/doc/kadm5/api-unit-test.tex
index 5e3d3ba91f..4210eadb74 100644
--- a/doc/kadm5/api-unit-test.tex
+++ b/doc/kadm5/api-unit-test.tex
@@ -1296,6 +1296,12 @@ ccache without credentials for ADMIN_SERVICE or CHANGEPW_SERVICE.}
 \Conditions{RPC}
 }
 
+\numtest{100}{
+\Version{KADM5_API_VERSION_2}
+\Priority{bug-fix}
+\Reason{Accepts max_rlife change.}
+\Status{Unimplemented.  Add all V2 tests for mod_princ!}
+}
 
 \section{ovsec_kadm_rename_principal}