[OpenAFS] ticket expireation question
Sat, 17 Sep 2005 11:42:42 +0100
Jiann-Ming Su wrote:
> loose on a AFS volume. What happens if the kerberos ticket expires
> before the job is done running? Additionally, how well would OpenAFS
Simply, it would lose its credentials; it would have whatever access
the ACLs allow for an unauthenticated client.
If the code for the simulation is something you control, you could in
theory modify it to use a Kerberos keytab to do its own authentication;
that's a security tradeoff though (and not something I know a great deal
about, so I could be wide of the mark). The same thing would probably
apply to processes running in a distributed enviroment.