k5start -K and ticket renewals
Nico Williams
nico at cryptonector.com
Thu Jan 16 19:02:24 EST 2014
Ideally the auto-renewal wake-up timer should be automatically set
from the TGT's lifetime (and libkrb5 should automatically handle any
faster expiration of non-initial tickets). Then -K shouldn't be
needed.
The hard part is how to handle transient renewal errors, particularly
when the ticket's original lifetime was short (but renew lifetime
long).
Nico
--
More information about the Kerberos
mailing list