[OpenAFS] Services running in AFS space

JR Boyens JR Boyens <jboyens@iastate.edu>
Wed, 4 Dec 2002 19:48:36 -0600


On Wed, Dec 04, 2002 at 03:25:52PM -0500 or thereabouts, Derrick J Brashear wrote:
> On Wed, 4 Dec 2002, JR Boyens wrote:
> 
> > I found something from UW-Madison (cs.wisc) about burtscript, stashticket, and
> > runauth which seemed rather promising, but I was unable to find a suitable
> > source for the...source. :)
> > 
> > I've thought about writing a little custom utility for myself that will just
> > fork a process and get a kerb ticket of known length and an AFS token, then
> > just wait until the ticket needs updating. I could probably do it in a cron job
> > too.
> 
> i think cmu distributes reauth. there might even be a pointer on
> freshmeat.
> 
> > My own university (Iowa State) skirts around the issue by not letting services
> > run there in the first place. Except for the web servers who are rebooted every
> > 30 days to get a new kerberos ticket.
> > 
> > So, to the point of my rant, is there an "official" (read: normal) way to do
> > this?
> 
> official, no. normal, well, actually, no. there are about 30 variants on
> ticket refreshers floating around.

Well, if it helps I'm looking for one that can handle krb5/afs and be able to
run almost anything and make sure the tickets stay updated.

Something like:
	foo -princ "someprogram/surly.fooninja.org" -exec /usr/bin/exim

etc.

Thanks.
> 
> 
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>