[OpenAFS] Automatically Renewing Tokens?

Dave Botsch botsch@cnf.cornell.edu
Wed, 25 May 2011 11:47:14 -0400

My experiences...

on Windows, the afs client tray app will autorenew tokens for you.

on Linux, you can start up krenew (part of the k5start package) when a
user logs in (we do this for ssh logins then kill it on logout). For GUI
linux logins, either krenew again or krb5-auth-dialog (the latest
versions have an aklog plugin).

On Wed, May 25, 2011 at 03:43:44PM +0000, Coy Hile wrote:
> Good morning, all,
> I know that things exist to automatically renew kerberos tickets up
> until the maximum renewal lifetime (Russ' k5start and Quest's
> autorenew  capability as part of Quest Authentication Services come to
> mind)  What are the suggested ways to auto-renew users' tokens as
> well? Think Joe who doesn't logout of his PC and needs access to \\AFS
> or someone who's running a screen session.
> Somewhat unrelated, is there the availablility to do the following at all:
> (1) Store %USERPROFILE% for windows users in a subdir of his user
> volume in AFS (thus making roaming profiles easy)?
> (2) Install Windows applications in \\AFS so that, for example, I need
> only install Visual Studio or Office 2010 once and have all windows
> boxes be able to find it?
> Thanks,
> -C
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info

David William Botsch
CNF Computing