[OpenAFS-port-darwin] OpenAFS 1.4.12; credential renewal in AFSBackgrounder?

Arthur Prokosch arthurp@csail.mit.edu
Fri, 19 Mar 2010 09:21:15 -0400


First, I want to congratulate everyone who worked on the 1.4.12
release -- default incorporation of the AFSBackgrounder, as well as
installer improvements, are invaluable for pain-free deployment of
AFS at our site (cell=csail.mit.edu).

I was wondering if a feature request has been submitted yet for
auto-renewing Kerberos credentials.  At our site, Kerberos tickets
each last 10h, but are renewable up to 7d.  The feature to
automatically renew the tickets while they were renewable was present
in 10.5's Kerberos.app, but is absent from 10.6's Ticket Viewer.app
(and I've found no good replacement).  With 1.4.12's AFSBackgrounder,
our users get kerberos+afs credentials at login, but lose them when
they leave machines on overnight (a common practice).

Thoughts?

For comparison: a basic KDE app that exists only to handle renewals of
kerberos+afs is Kredentials, http://packages.debian.org/lenny/kredentials .  

thanks,
-arthur.