Hi All Please take a look at the fix at http://cr.openjdk.java.net/~weijun/8131051/webrev.00/ When a ticket request has a ticket_lifetime that the KDC considers too long it will issue a renewable ticket with a shorter lifetime. Unfortunately, JDK does not accept this. Thanks Max