[OpenAFS-devel] Re: rxkad.keytab rotation

Andrew Deason adeason@sinenomine.net
Tue, 22 Oct 2013 15:05:12 -0500


On Tue, 22 Oct 2013 15:01:55 -0500
Andrew Deason <adeason@sinenomine.net> wrote:

> But how do we know if something failed due to key-related problems? I
> assume we can't really depend on a certain range of error codes (like
> rxk.*), and we can't redo everything on every error.

Hmm, but every positive connection-level error may be good enough. I
think the only ones we really use right now are auth-related, and we'll
have to recreate the conn anyway, so might as well try the next key?

-- 
Andrew Deason
adeason@sinenomine.net