On Mon, Sep 04, 2017 at 01:06:22PM -0400, Mark London wrote:
Sumit - Thanks for the info. Some of our users do work directly at
the
workstation, so I'm glad to hear that they would get a fresh Kerberos
ticket, when they would have to login via the screen saver, on a daily
basis.. However, some of these same users, ssh to other workstations, to
run jobs on multiple workstations, and may stayed logged in, past the SSSD
lifetime limit. I'm curious if there is a way to warn such people, when
their Kerberos tickets are about to expire. I.e., to automatically create
job when they login, that checks the age of their kerberos ticket on a daily
basis. We will have to look at this issue more closely. Thanks! - Mark
We plan on providing a D-Bus-based notification API eventually:
https://pagure.io/SSSD/sssd/issue/1497
I guess you can poll the ticket in the meantime with a cron job..
For really long-running jobs, maybe it would be best to create a keytab?