[OpenAFS] OpenAFS access at login time on MacOS
Richard Brittain
Richard.Brittain@dartmouth.edu
Mon, 22 May 2023 18:24:01 +0000
--_000_BL1PR03MB61989116E34C52E59588BD4F9E439BL1PR03MB6198namp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
From: openafs-info-admin@openafs.org <openafs-info-admin@openafs.org> on be=
half of Richard Feltstykket <richard@unixboxen.net>
Date: Thursday, May 11, 2023 at 6:22 AM
To: openafs-info@openafs.org <openafs-info@openafs.org>
Subject: [OpenAFS] OpenAFS access at login time on MacOS
=85
There is a program in the app store called 'kerberos ticket autorewnewal'. =
I have installed it but haven't confirmed its operation.
=85
I got excited when you posted that.
That utility appears to only acquire new tickets using a stored password, a=
nd not actually perform a renewal in the sense of =91kinit -R=92, even when=
the ticket is renewable. I=92ve tried (and failed) to make Russ Allbery=
=92s krenew, function on MacOS, but have cobbled together a simple launchag=
ent to periodically run krenew and aklog. It mostly does the trick
_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info
--_000_BL1PR03MB61989116E34C52E59588BD4F9E439BL1PR03MB6198namp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:w=3D"urn:sc=
hemas-microsoft-com:office:word" xmlns:m=3D"http://schemas.microsoft.com/of=
fice/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1=
252">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple" style=3D"word-wrap:brea=
k-word">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><o:p> </o:p></=
span></p>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><b><span style=3D"fon=
t-size:12.0pt;color:black">From:
</span></b><span style=3D"font-size:12.0pt;color:black">openafs-info-admin@=
openafs.org <openafs-info-admin@openafs.org> on behalf of Richard Fel=
tstykket <richard@unixboxen.net><br>
<b>Date: </b>Thursday, May 11, 2023 at 6:22 AM<br>
<b>To: </b>openafs-info@openafs.org <openafs-info@openafs.org><br>
<b>Subject: </b>[OpenAFS] OpenAFS access at login time on MacOS<o:p></o:p><=
/span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-s=
ize:11.0pt">=85<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">There is a program =
in the app store called 'kerberos ticket autorewnewal'. I have instal=
led it but haven't confirmed its operation.<br>
<br>
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">=85<o:p></o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">I got excited when =
you posted that.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">That utility appear=
s to only acquire new tickets using a stored password, and not actually per=
form a renewal in the sense of =91kinit -R=92, even when the ticket is rene=
wable. I=92ve tried (and failed) to make
Russ Allbery=92s krenew, function on MacOS, but have cobbled together a si=
mple launchagent to periodically run krenew and aklog. It mostly does=
the trick<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><o:p> </o:p></=
span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">___________________=
____________________________<br>
OpenAFS-info mailing list<br>
OpenAFS-info@openafs.org<br>
<a href=3D"https://lists.openafs.org/mailman/listinfo/openafs-info">https:/=
/lists.openafs.org/mailman/listinfo/openafs-info</a><o:p></o:p></span></p>
</div>
</div>
</body>
</html>
--_000_BL1PR03MB61989116E34C52E59588BD4F9E439BL1PR03MB6198namp_--