Long-running jobs with renewal of krb5 tickets and AFS tokens

Russ Allbery rra at stanford.edu
Sat Feb 28 18:35:48 EST 2009


Thomas Kula <kula at tproa.net> writes:

> I don't think k5start has an option that prompts you for a password
> *and* remembers it to keep renewing credentials on your behalf, but
> since I always just use the keytab option I'm not as familiar with that
> use of k5start.

k5start intentionally doesn't support this because I think it undermines
the Kerberos security model.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the Kerberos mailing list