URL:
https://github.com/freeipa/freeipa/pull/855
Title: #855: Prevent issues with older clients
simo5 commented:
"""
In my test setup I verified the cookie does not have the MaxAge setting, and that
kinit_lifetime properly causes the session to expire after the lifetime indicated.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/855#issuecomment-306539239