[35868] in Kerberos
Re: Fwd: Kerberos5 ticket auto renewal
daemon@ATHENA.MIT.EDU (Wendy Lin)
Tue Mar 18 10:13:20 2014
MIME-Version: 1.0
In-Reply-To: <532853AA.3030300@oracle.com>
Date: Tue, 18 Mar 2014 15:13:10 +0100
Message-ID: <CA+j=ERribT3Khn7HK3YRN3OSKHwDH9zfK=KaKbfOS1YADMCeOw@mail.gmail.com>
From: Wendy Lin <wendlin1974@gmail.com>
To: Tomas Kuthan <tomas.kuthan@oracle.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 18 March 2014 15:09, Tomas Kuthan <tomas.kuthan@oracle.com> wrote:
> On 03/18/14 03:00 PM, Wendy Lin wrote:
>>
>> On 18 March 2014 13:54, Tomas Kuthan<tomas.kuthan@oracle.com> wrote:
>>>
>>> Hi Wendy,
>>>
>>> (I can only comment on Solaris)
>>>
>>> I suppose, you are referring to automatic renewal of tickets by
>>> ktkt_warnd. ktkt_warn service is enabled by default, but there are
>>> upgrade scenarios, were you can end up with ktkt_warn disabled. Run
>>> 'svcs ktkt_warn' to confirm.
>>>
>>> If ktkt_warn is up and running, it could also be user-principal
>>> discrepancy. IIRC, ktkt_warn won't register a warning for a principal
>>> that doesn't map to your uid (such as running 'kinit username' as root).
>>
>>
>> 1. Where can I find ktkt_warn for Linux?
>
>
> I don't think there is one.
How can ktkt_warn renew tickets without having a password?
>
>
>> 2. ktkt_warn seems to be broken in Illumos and Solaris 11, see
>> https://www.illumos.org/issues/3271
>
>
> I am using ktkt_warn myself on Solaris 11.1 and it works fine for me.
> I cannot comment on Illumos.
I was talking about Solaris 11.0
Wendy
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
