Minimum Ticket Lifetime Property
The minimum ticket lifetime is the minimum amount of time in minutes before the principal's ticket must be renewed. This renewal is performed automatically with no intervention on the part of the user. The shorter you make the minimum ticket lifetime, the greater the security of the system. However, extremely frequent renewal can degrade system performance. The minimum ticket lifetime that you set needs to take into consideration system performance and the level of security that your cell requires.
You set the minimum ticket lifetime with the dcecp mintktlife attribute in the following form:
mintktlife integer
where integer is a number that indicates the number of minutes in the minimum ticket lifetime.
The minimum ticket lifetime can be set only as a registry property. It cannot be set for individual accounts. (Contrast this with the maximum ticket lifetime property, which is set with the dcecp registry modify or account modify commands.)