What's not useable about that? It correctly sets KRB5CCNAME which aklog can then use. Each ssh login gets a seperate PAG anyway, so why not have seperate KRB5CCs? This way, at least cleaning up the tokens on logout is clearly defined.
Typically, I have a bunch of xterms ssh'd to our dev machine, along with at least one "ssh -f host emacs". When all the tokens expire, I have to run kauth in all windows. This is not the case with telnet -F.
_______________________________________________ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info