[OpenAFS] Automatic token renewal

Robbert Eggermont R.Eggermont@tudelft.nl
Thu, 02 Jul 2009 22:59:44 +0200


Russ Allbery wrote:
> Robbert Eggermont <R.Eggermont@tudelft.nl> writes:
> 
>> I tried to run 'krenew -b -t -K 60' from a /opt/kde3/env/ shell
>> script.  When running klist in a shell under KDE, I see the Kerberos
>> ticket (in /tmp/krb5cc_xxxx) being renewed every 5 hours. However, my
>> AFS token in the shell is not being renewed. According to the krenew
>> and shell PAG group ids, they seem to be in the same PAG. Krenew seems
>> to work as expected when run in a shell under KDE. What am I missing
>> here?
> 
> Try running krenew without the -b flag so that you can get error
> messages sent somewhere useful (probably .xsession-errors) and see if
> aklog is complaining about something.

I will give this a go.

> When looking at the Kerberos ticket cache, is the afs service ticket
> also refreshing?

No, the TGT is renewed, all other tickets are dropped.

Cheers,

Robbert

-- 
Robbert Eggermont                   Information & Communication Theory
R.Eggermont@TUDelft.nl         Electr.Eng., Mathematics & Comp.Science
+31 (15) 2783234                        Delft University of Technology