other than using kinit -r afterwards, how can sssd/pam be configured to invoke kinit -r
at login?
Before migrated to IPA, I install kstart for kerberos clients and run krenew -K 60 to
have
krenew checking every 60 minutes in the background to extend ticket when due to expire.
It does not work with IPA client because it seems IPA client can not obtain a renewable
ticket by default at login. Can this be changed?
Thanks,
Qing
--
------------------
Qing Chang
Senior Systems Administrator
M6-624 Research Computing
Sunnybrook Health Sciences Centre
2075 Bayview Ave.
Toronto, Ontario, M4N 3M5
(416) 480-6100 x3263
qchang(a)sri.utoronto.ca
------------------