[OpenAFS] Automatically Renewing Tokens?
Dave Botsch
botsch@cnf.cornell.edu
Wed, 25 May 2011 11:47:14 -0400
My experiences...
on Windows, the afs client tray app will autorenew tokens for you.
on Linux, you can start up krenew (part of the k5start package) when a
user logs in (we do this for ssh logins then kill it on logout). For GUI
linux logins, either krenew again or krb5-auth-dialog (the latest
versions have an aklog plugin).
On Wed, May 25, 2011 at 03:43:44PM +0000, Coy Hile wrote:
> Good morning, all,
>
> I know that things exist to automatically renew kerberos tickets up
> until the maximum renewal lifetime (Russ' k5start and Quest's
> autorenew capability as part of Quest Authentication Services come to
> mind) What are the suggested ways to auto-renew users' tokens as
> well? Think Joe who doesn't logout of his PC and needs access to \\AFS
> or someone who's running a screen session.
>
> Somewhat unrelated, is there the availablility to do the following at all:
>
> (1) Store %USERPROFILE% for windows users in a subdir of his user
> volume in AFS (thus making roaming profiles easy)?
> (2) Install Windows applications in \\AFS so that, for example, I need
> only install Visual Studio or Office 2010 once and have all windows
> boxes be able to find it?
>
> Thanks,
>
> -C
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>
--
********************************
David William Botsch
Programmer/Analyst
CNF Computing
botsch@cnf.cornell.edu
********************************