[OpenAFS] tokens for long processes

[Steven N. Hirsch]

On Sun, 12 Feb 2034, Matthew Cocker wrote:

> Hi
> 
> As I have mentioned in the list recently we are moving OpenAFS into full
> production in our department. Unfortunately we still have loads of issues to
> sort out, including how to keep long running processes that write to a users
> home directory in AFS space happy. We are running a MIT Krb5/Openafs cell
> with the max ticket life set to 10 hrs (I can't seem to make it any longer
> than that so is that the maximum allowed by MIT krb5?). Unfortuantely we
> routinely have users with processes which run for months. What methods have
> others afs cells used to keep such processes happy. We have considered
> writing a script that gets called by cron maybe using a keytab file, or
> maybe just do a ticket renewal then rerun aklog. Is there a better way? I
> have seen lots written about reauth, is that a solution?

At work, I run 'reauth' and the application which needs the long-term 
ticket as children of a pagsh.  I seem to remember having to make a minor 
change to the reauth sources, though.  I'll take a look later today.

Steve