[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <4EC662DC.70001@Calva.COM>
Date: Fri, 18 Nov 2011 14:51:24 +0100
From: John Hughes <john@...va.COM>
To: Steve Dickson <SteveD@...hat.com>
CC: Trond Myklebust <Trond.Myklebust@...app.com>,
linux-nfs@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re: [PATCH] Add "-e" option to rpc.gssd to allow error on ticket
expiry
On 18/11/11 14:44, Steve Dickson wrote:
>
> I think the answer to all this is have the ticket
> renewed before it expires. There is a daemon call sssd
> that is part of the FreeIPA project that will supposedly
> do that for us... I'm looking into it...
You can only renoew the ticket before it expires if it hasn't yet expired.
Imagine this case:
I go home for the evening.
The screensaver kicks in.
The machine suspends to ram.
The ticket expires. Yes, it was renewable but nobody could renew it
because they were asleep.
I come back the next morning, hit a key, the unlock screen pops up, I
enter my password, pam_krb5 gets a new ticket.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists