API help with ticket expiry

Keagle, Chuck chuck.keagle at boeing.com
Wed Sep 27 20:41:06 EDT 2006


I'm working on making a batch queuing manager get a ticket for a user
job that will execute without user interface in such a way the user
doesn't have to put Kerberos username and password in clear text in the
job stream.  When user submits job, it may or may not run until after
the current ticket has expired.  Then the job could run longer than a
ticket lifetime.

My plan is to create a new ticket whenever the current ticket has less
than 2 hours left before expiration.

I have been able to create the ticket using encrypted username/password
and am now working on making sure the ticket doesn't expire before the
job ends.  Granted, this isn't the safest mechanism, but users don't
want jobs to abort if ticket expires when they are not around.

krb5_timeofday() will obtain what I need (seconds since epoch) for the
current time-of-day.

How would one go about obtaining the seconds since epoch for the ticket
expiration time-of-day?

I've Scoured the API list and haven't found one to do it easily.  I
could take the time and date and convert them to seconds since the epoch
but would like to find an easier way to do it.

Thanks.

----
Not all who wander are lost.

                          |     ----  ___o  |  chuck.keagle at boeing.com
Chuck Keagle              |  -------  \ <,  |  Work:  (425) 865-1488
Enterprise Servers:  HPC  |  ----- ( )/ ( ) |  Cell:  (425) 417-3434
http://card.web.boeing.com/Webcard.cfm?id=73990
 <<Keagle, Chuck.vcf>> 


More information about the Kerberos mailing list