You can change the default security and logging settings for all configured Active Directory domains and Kerberos realms.
|Force TCP||When selected, requires use of the Transmission Control Protocol
instead of the default User Datagram Protocol. Use this option when
firewall or network configurations require acknowledgment that packets
are properly received.
If you choose this option, you must restart PingFederate after saving the configuration.
|Debug Log Output||When selected, sends verbose messages to the PingFederate server log for all interactions with the domain controllers or the Key Distribution Centers (KDCs).|
|AD Domain Controller/Key Distribution Center Timeout (secs)||The number of seconds that PingFederate waits for a network response
from a domain controller or KDC. The default is
This value applies to each attempt PingFederate makes to contact the domain controller or KDC.
The new timeout takes effect only after you save the configuration and restart PingFederate..
|AD Domain Controller/Key Distribution Center Retries||Specifies the number of times PingFederate tries contacting the
domain controller or KDC. The default is
|Key Set Retention Period (mins)||The number of minutes that PingFederate retains the encryption keys
associated with the previous password of the Kerberos service account.
The allowed range is 0 to 10080 minutes (seven days) and the default
value is 610 minutes.
PingFederate only retains the key sets associated with previous passwords if you select the Retain Previous Keys on Password Change check box on the Manage Domain/Realm window. For more information, see Adding Active Directory domains and Kerberos realms.