# Troubleshooting

- When I try to renew my ticket, why do I get an error message and see the Get Ticket window?
- Why did my tickets expire even though I had Automatically Renew Tickets turned on?
- Why doesn't my ticket lifetime match the lifetime I selected with the slider in the Get Ticket window?
- How do I set properties like the default ticket lifetime?
- I have multiple principals and have tickets for all of them, but sometimes an application that requires Kerberos doesn't work. What's going on?

### When I try to renew my ticket, why do I get an error message and see the Get Ticket window?

The ticket cannot be renewed. This could be because the ticket was not flagged as renewable when you obtained it, or because it expired before you could renew it, or because the ticket's renewable lifetime has been reached. About: Renewable Tickets

Back to top

### Why did my tickets expire even though I had Automatically Renew Tickets turned on?

MIT Kerberos can only renew your tickets if the program is running and active. It cannot renew your tickets if you exit the program or if your computer is turned off or in hibernation mode.

Back to top

### Why doesn't my ticket lifetime match the lifetime I selected with the slider in the Get Ticket window?

Your Kerberos installation is configured for a maximum ticket lifetime length that is determined by the administrators. If your installation uses a shorter maximum ticket lifetime than the default, the Ticket Lifetime slider might show the default maximum instead of the actual maximum.

For example, if your Kerberos installation has been configured to issue tickets that expire in 5 hours or less, you might be able to move the slider to show 12 hours but you would still be issued a ticket with a lifetime of only 5 hours.

Back to top

### How do I set properties like the default ticket lifetime?

You cannot use the MIT Kerberos program to set properties such as default ticket lifetimes. Instead, edit the appropriate configuration file. For more information, visit the MIT Kerberos documentation site.

Back to top

### I have multiple principals and have tickets for all of them, but sometimes an application that requires Kerberos doesn't work. What's going on?

When you try to use a Keberized application, it requests your credentials from Kerberos. Some applications do this by asking for a specific principal's credentials, but others ask generically. When applications make a generic request, Kerberos does not know which principal is being authenticated and checks the default principal for tickets. If the default principal is not the one being authenticated, the application will usually simply fail to work with no warning or notice. How to: Make Default Principal

Back to top