Using kadmin, at one time creating new principals gave me defaults for max ticket life of 25 hours and max renewable life of one week. Now, I get defaults of 'unlimited'. What controls the default values? I am unable to find any documentation on this. thanks /fc