[OpenAFS] Automatically Renewing Tokens?

Coy Hile coy.hile@coyhile.com
Wed, 25 May 2011 15:43:44 +0000


Good morning, all,

I know that things exist to automatically renew kerberos tickets up
until the maximum renewal lifetime (Russ' k5start and Quest's
autorenew  capability as part of Quest Authentication Services come to
mind)  What are the suggested ways to auto-renew users' tokens as
well? Think Joe who doesn't logout of his PC and needs access to \\AFS
or someone who's running a screen session.

Somewhat unrelated, is there the availablility to do the following at all:

(1) Store %USERPROFILE% for windows users in a subdir of his user
volume in AFS (thus making roaming profiles easy)?
(2) Install Windows applications in \\AFS so that, for example, I need
only install Visual Studio or Office 2010 once and have all windows
boxes be able to find it?

Thanks,

-C