"Jacques A. Vidrine" <n@nectar.com> writes: > What is the purpose of these fields? Where should they be set? They should be set by the kdc, but doing so is not easy (since you want a global value, not just per kdc), and I'm not sure it's worth the trouble. The reason they're there is because this feature is mentioned in the RFC. /Johan