Is there a way to renew a user's TGT

Roland Dowdeswell elric at imrryr.org
Wed Jan 25 17:37:25 EST 2006


On 1138219882 seconds since the Beginning of the UNIX epoch
ryan.d.jarvis at exxonmobil.com wrote:
>
>Is it possible to automatically renew user TGTs  without a user's original
>credentials (Smart Card or Cached Password)?
>The tickets have a renewal period set to 7 days - but only last until the
>original TGT expires (1 hour - for tests)

Well, you can obtain renewable tickets and then use kinit -R to
renew them.  To do this for long running jobs, you might want to
increase the renewable lifetime of the tickets, i.e.

	$ kinit -r 40d user at REALM.TLD

Then periodically, kinit -R.  You must renew them before they expire.

--
    Roland Dowdeswell                      http://www.Imrryr.ORG/~elric/



More information about the krbdev mailing list