[OpenAFS] Renew tokens with screensaver

[Jared Smith]

Jeffrey,

So in a nut shell if I am using AD there is a way,  if I am not using AD 
then users will need to click on Network Identity Manager and renew there?

Thanks for the quick reply!!

Jared

Jeffrey Altman wrote:
> On 2/5/2010 4:56 PM, Jared Smith wrote:
>   
>> I have a handful of ubuntu users that get their tokens renewed every
>> time they put there password in to remove their screensavers.  Makes it
>> really nice and seemless.  Now I have a bunch of users switch to Windows
>> and they have to renew after 7 days.  Wondering if there is something
>> similar like that for windows 7/vista/xp?  I have done some google
>> searching but not turning up anything.
>>
>> Thanks,
>> Jared
>>     
>
> There is no password hook for the Windows screen saver.
> If your users are logging in to a domain and use the domain principal
> to obtain afs tickets, then the Kerberos credentials in the MSLSA
> will be renewed automatically and Network Identity Manager will use
> them to renew the afs tokens.
>
> Otherwise, your users will need to obtain new credentials with
> network identity manager when the renewable lifetime expires.
>
> Jeffrey Altman
>
>