Received: from smtp1.Stanford.EDU (smtp1.Stanford.EDU [171.67.16.123]) by krbdev.mit.edu (8.9.3p2) with ESMTP id QAA09948; Wed, 23 Jun 2004 16:03:39 -0400 (EDT) Received: from windlord.stanford.edu (windlord.Stanford.EDU [171.64.19.147]) by smtp1.Stanford.EDU (8.12.11/8.12.11) with SMTP id i5NK3X1Z016608 for ; Wed, 23 Jun 2004 13:03:33 -0700 Received: (qmail 4299 invoked by uid 1000); 23 Jun 2004 20:03:33 -0000 To: rt-comment@krbdev.mit.edu Subject: Re: [krbdev.mit.edu #2611] automatically getting initial tickets using keytab In-Reply-To: (Ken Raeburn via's message of "Wed, 23 Jun 2004 15:17:56 -0400 (EDT)") References: From: Russ Allbery Organization: The Eyrie Date: Wed, 23 Jun 2004 13:03:33 -0700 Message-Id: <87smcmxcru.fsf@windlord.stanford.edu> User-Agent: Gnus/5.1006 (Gnus v5.10.6) XEmacs/21.4 (Security Through Obscurity, linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii RT-Send-Cc: X-RT-Original-Encoding: us-ascii Content-Length: 493 Ken Raeburn via RT writes: > It would be handy to have a way to say, here's my keytab file, go get > new tickets any time they're needed. Then a long- or frequently-running > service or batch job or whatever with a keytab doesn't have to > explicitly re-run kinit every N hours. does this for Unix; we've been using it for many years. -- Russ Allbery (rra@stanford.edu)