k5start -K and ticket renewals

Nico Williams nico at cryptonector.com
Thu Jan 16 19:02:24 EST 2014


Ideally the auto-renewal wake-up timer should be automatically set
from the TGT's lifetime (and libkrb5 should automatically handle any
faster expiration of non-initial tickets).  Then -K shouldn't be
needed.

The hard part is how to handle transient renewal errors, particularly
when the ticket's original lifetime was short (but renew lifetime
long).

Nico
--


More information about the Kerberos mailing list