Ideally the auto-renewal wake-up timer should be automatically set from the TGT's lifetime (and libkrb5 should automatically handle any faster expiration of non-initial tickets). Then -K shouldn't be needed.
The hard part is how to handle transient renewal errors, particularly when the ticket's original lifetime was short (but renew lifetime long). Nico -- ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos