[20055] in Athena Bugs

home help back first fref pref prev next nref lref last post

Re: Long job support needed

daemon@ATHENA.MIT.EDU (Robert A Basch)
Fri Dec 7 11:26:52 2001

Date: Fri, 7 Dec 2001 11:26:50 -0500
Message-Id: <200112071626.LAA04171@anhedonia.mit.edu>
From: Robert A Basch <rbasch@MIT.EDU>
To: Garry Zacheiss <zacheiss@mit.edu>
CC: Thomas E Cavin <cavin@mit.edu>, Athena Bugs list <bugs@mit.edu>,
        Tom Cavin <tec@ai.MIT.EDU>
In-reply-to: "[20045] in Athena Bugs"

> while (1)
>       kinit -R
>       aklog
>       sleep <18 hours>
> done

One thing to beware of here -- while "kinit -R" will convert the
renewed Kerberos 5 TGT to Kerberos 4, there is currently a bug in the
conversion such that any subsequently acquired Kerberos 4 tickets, and
thus AFS tokens, will be limited to a lifetime of about 11 hours and
30 minutes.  So, you probably want to sleep for no more than 10 hours
when using "kinit -R".  (The problem does not occur when simply using
"kinit -l <time>", which gets a Kerberos 4 TGT directly, as opposed to
using conversion).

Bob

home help back first fref pref prev next nref lref last post