[OpenAFS] Renew tokens with screensaver

Jared Smith sjaredj@bidsync.com
Fri, 05 Feb 2010 15:36:41 -0700


So in a nut shell if I am using AD there is a way,  if I am not using AD 
then users will need to click on Network Identity Manager and renew there?

Thanks for the quick reply!!


Jeffrey Altman wrote:
> On 2/5/2010 4:56 PM, Jared Smith wrote:
>> I have a handful of ubuntu users that get their tokens renewed every
>> time they put there password in to remove their screensavers.  Makes it
>> really nice and seemless.  Now I have a bunch of users switch to Windows
>> and they have to renew after 7 days.  Wondering if there is something
>> similar like that for windows 7/vista/xp?  I have done some google
>> searching but not turning up anything.
>> Thanks,
>> Jared
> There is no password hook for the Windows screen saver.
> If your users are logging in to a domain and use the domain principal
> to obtain afs tickets, then the Kerberos credentials in the MSLSA
> will be renewed automatically and Network Identity Manager will use
> them to renew the afs tokens.
> Otherwise, your users will need to obtain new credentials with
> network identity manager when the renewable lifetime expires.
> Jeffrey Altman