2.51 Attribute minTicketAge

  • Article

For a given security principle, this attribute specifies the minimum time period (in hours) that a user's TGT can be used for Kerberos authentication before a request can be made to renew the ticket.

 cn: Min-Ticket-Age
 ldapDisplayName: minTicketAge
 attributeId: 1.2.840.113556.1.4.80
 attributeSyntax: 2.5.5.16
 omSyntax: 65
 isSingleValued: TRUE
 schemaIdGuid: bf9679c4-0de6-11d0-a285-00aa003049e2
 systemOnly: FALSE
 searchFlags: 0
 systemFlags: FLAG_SCHEMA_BASE_OBJECT
 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

Version-Specific Behavior: First implemented on Windows 2000 Server operating system.

The schemaFlagsEx attribute was added to this attribute definition in Windows Server 2008 operating system.