> Just got caught out by this, the graceperiod value should be a Unix
> timestamp right?
You're right - IMHO it would make more sense the way the docs describe it (just a relative number of seconds rather than an absolute timestamp), but with the move from the TKTAuthGracePeriod directive to the graceperiod ticket attribute, this was changed (I assume this was a deliberate decision by Frederic), and I didn't update the docs. "graceperiod" may now actually be a bit of a misleading name for an absolute timestamp, but rather than changing the logic again (and thus potentially breaking existing setups), I've simply updated the docs.
Thanks for letting us know!
- Manuel