Is there a way to renew a user's TGT
Roland Dowdeswell
elric at imrryr.org
Wed Jan 25 17:37:25 EST 2006
On 1138219882 seconds since the Beginning of the UNIX epoch
ryan.d.jarvis at exxonmobil.com wrote:
>
>Is it possible to automatically renew user TGTs without a user's original
>credentials (Smart Card or Cached Password)?
>The tickets have a renewal period set to 7 days - but only last until the
>original TGT expires (1 hour - for tests)
Well, you can obtain renewable tickets and then use kinit -R to
renew them. To do this for long running jobs, you might want to
increase the renewable lifetime of the tickets, i.e.
$ kinit -r 40d user at REALM.TLD
Then periodically, kinit -R. You must renew them before they expire.
--
Roland Dowdeswell http://www.Imrryr.ORG/~elric/
More information about the krbdev
mailing list