pktcMtaDevRealmPkinitGracePeriod
PKTC-IETF-MTA-MIB ·
.1.3.6.1.2.1.140.1.3.6.1.3
Object
column
r/w
minutes Unsigned32
This object contains the PKINIT Grace Period. For the purpose of key management with Application Servers (CMSes or the Provisioning Server), the MTA must utilize the PKINIT exchange to obtain Application Server tickets. The MTA may utilize the PKINIT exchange to obtain Ticket Granting Tickets (TGTs), which are then used to obtain Application Server tickets in a TGS exchange. The PKINIT exchange occurs according to the current Ticket Expiration Time (TicketEXP) and on the PKINIT Grace Period (PKINITGP). The MTA MUST initiate the PKINIT exchange at the time: TicketEXP - PKINITGP.
Context
- MIB
- PKTC-IETF-MTA-MIB
- OID
.1.3.6.1.2.1.140.1.3.6.1.3- Type
- column
- Access
- readwrite
- Status
- current
- Units
- minutes
- Parent
- pktcMtaDevRealmEntry
- Table
- pktcMtaDevRealmTable
- Siblings
- 8
Syntax
minutes Unsigned32
Values & Constraints
Object Constraints
range: 15-600
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| pktcMtaDevRealmIndex This object defines the realm table index. | column | Unsigned32 | .1.3.6.1.2.1.140.1.3.6.1.1 |
| pktcMtaDevRealmName This object identifies the Kerberos realm name in all
capitals. The MTA MUST prohibit the instantiation of any
two rows with identical Kerberos realm names. The MTA MUST
also ve… | column | OctetString | .1.3.6.1.2.1.140.1.3.6.1.2 |
| pktcMtaDevRealmTgsGracePeriod This object contains the Ticket Granting Server Grace
Period (TGSGP). The Ticket Granting Server (TGS)
Request/Reply exchange may be performed by the MTA
on demand whenever an Ap… | column | minutes Unsigned32 | .1.3.6.1.2.1.140.1.3.6.1.4 |
| pktcMtaDevRealmOrgName This object contains the X.500 organization name attribute
as defined in the subject name of the service provider
certificate. | column | SNMP-FRAMEWORK-MIBSnmpAdminString | .1.3.6.1.2.1.140.1.3.6.1.5 |
| pktcMtaDevRealmUnsolicitedKeyMaxTimeout This object specifies the maximum time the MTA will
attempt to perform the exponential back-off algorithm.
This timer only applies when the MTA initiated key
management. If the D… | column | seconds Unsigned32 | .1.3.6.1.2.1.140.1.3.6.1.6 |
| pktcMtaDevRealmUnsolicitedKeyNomTimeout This object specifies the initial timeout value
for the AS-REQ/AS-REP exponential back-off and retry
mechanism. If the DHCP option code 122, sub-option 4, is
provided to the MTA,… | column | milliseconds Unsigned32 | .1.3.6.1.2.1.140.1.3.6.1.7 |
| pktcMtaDevRealmUnsolicitedKeyMaxRetries This object specifies the maximum number of retries the
MTA attempts to obtain a ticket from the KDC.
Unsolicited key updates are retransmitted according to an
expo… | column | Unsigned32 | .1.3.6.1.2.1.140.1.3.6.1.8 |
| pktcMtaDevRealmStatus This object defines the row status of this realm in the
realm table (pktcMtaDevRealmTable).
An entry in this table is not qualified for activation
until the object … | column | SNMPv2-TCRowStatus | .1.3.6.1.2.1.140.1.3.6.1.9 |