What are the merits of sssd for doing something like what kstart does? I have it running and working for other needs and I think it provides more than just kerberos token management.
The caching offers fault tolerance and resiliency in the case of problems, as one example. brendan On Jan 4, 2016 1:34 PM, "Quanah Gibson-Mount" <qua...@zimbra.com> wrote: > --On Saturday, January 02, 2016 12:00 PM -0500 Brendan Kearney < > bpk...@gmail.com> wrote: > > > Victor's script gets a Kerberos ticket every hour. it does not renew >> the existing ticket, it seems. my tickets are valid for 10 hours, and >> renewable for 1 week. getting a new ticket every hour is unnecessary. >> the idea of a samba client being used to refresh tickets sounds >> interesting. Louis, please do provide more detail. >> > > I suggest reading up on kstart: > > <http://www.eyrie.org/~eagle/software/kstart/> > > It's really the best way to do ticket management when dealing with > Kerberos. > > --Quanah > > -- > > Quanah Gibson-Mount > Platform Architect > Zimbra, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >
