[OpenAFS] Renew tokens with screensaver
Fri, 05 Feb 2010 15:36:41 -0700
So in a nut shell if I am using AD there is a way, if I am not using AD
then users will need to click on Network Identity Manager and renew there?
Thanks for the quick reply!!
Jeffrey Altman wrote:
> On 2/5/2010 4:56 PM, Jared Smith wrote:
>> I have a handful of ubuntu users that get their tokens renewed every
>> time they put there password in to remove their screensavers. Makes it
>> really nice and seemless. Now I have a bunch of users switch to Windows
>> and they have to renew after 7 days. Wondering if there is something
>> similar like that for windows 7/vista/xp? I have done some google
>> searching but not turning up anything.
> There is no password hook for the Windows screen saver.
> If your users are logging in to a domain and use the domain principal
> to obtain afs tickets, then the Kerberos credentials in the MSLSA
> will be renewed automatically and Network Identity Manager will use
> them to renew the afs tokens.
> Otherwise, your users will need to obtain new credentials with
> network identity manager when the renewable lifetime expires.
> Jeffrey Altman