I have started with configuring kerberos.

Can anyone explain the ticket lifetime and renew lifetime we set in the krb5.conf file.

```
ticket_lifetime = 2d  
renew_lifetime = 7d

```

Is it like

1. After 2 days client will get the new renewed ticket ?
2. After 7 days do i need to create the key tabs again and send to client machines?