[OpenAFS] Tokens and screen under linux

Russ Allbery rra@stanford.edu
Mon, 06 Jul 2009 11:16:58 -0700

Anders Magnusson <ragge@ltu.se> writes:

> I would do something like
> % kinit -t /path/to/my/secret/keytab tcsh
> This depends on Heimdal kinit, but it will keep your tickets and
> tokens up-to-date as long as you are not exiting the started tcsh.  It
> also gives you a new credential cache and a new PAG, so it will work
> even if the parent PAG or credential cache gets destroyed.

If you have a keytab, k5start will do the same thing for non-Heimdal,
but we discourage users from generating keytabs for their personal
accounts.  But this works great if you have a facility for users to
create instances for separate long-running jobs that they can create a
keytab for.

Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>