zeroguy <[EMAIL PROTECTED]> writes:
> Frank Burkhardt <[EMAIL PROTECTED]> wrote:

>> Currently I use a skript refreshing the token for apache's UID at a
>> regular basis ( su - www-data make_token_from_keytab apache.keytab )
>> but I'm going to put Apache in a PAG ASAP.

> We just altered our apache init script to run in a PAG (start the script
> with #!/usr/bin/pagsh), and run another script in the background that
> just refreshes the credentials every so often (using a keytab). I.e.
> sleep 21600, kinit, aklog, repeat.

<http://www.eyrie.org/~eagle/software/kstart/> may be of interest.

-- 
Russ Allbery ([EMAIL PROTECTED])             <http://www.eyrie.org/~eagle/>
_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to