[SSSD] How to obtain a renewable ticket from IPA when login to an IPA client?

Qing Chang qchang at sri.utoronto.ca
Thu Feb 28 14:43:55 UTC 2013


other than using kinit -r afterwards, how can sssd/pam be configured to invoke kinit -r
at login?

Before migrated to IPA, I install kstart for kerberos clients and run krenew -K 60 to have
krenew checking every 60 minutes in the background to extend ticket when due to expire.

It does not work with IPA client because it seems IPA client can not obtain a renewable
ticket by default at login. Can this be changed?

Thanks,
Qing

-- 
------------------
Qing Chang
Senior Systems Administrator
M6-624 Research Computing
Sunnybrook Health Sciences Centre
2075 Bayview Ave.
Toronto, Ontario,  M4N 3M5
(416) 480-6100 x3263
qchang at sri.utoronto.ca
------------------




More information about the sssd-devel mailing list