Re: KDC Configuration Questions

2009-03-02 Thread Anh Nguyen
Ken Raeburn wrote: > On Feb 6, 2009, at 11:31, Anh Nguyen wrote: >> Hi, >> Sorry for the following newbies questions, but thanks in advance for >> your comments and suggestions: >> 1. Could we set up multiple KDC per single realm? > > Absolutely; at most sites I think it's the normal way of doing

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-03-02 Thread Nicolas Williams
On Mon, Mar 02, 2009 at 09:02:59PM -0500, Jason Edgecombe wrote: > Nicolas Williams wrote: > >I have seen sites use on the order of months for the renewable ticket > >lifetime, but still hours for normal ticket lifetime. If you already > >use seven days for renew life you might as well double it -

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-03-02 Thread Jason Edgecombe
Nicolas Williams wrote: > On Sat, Feb 28, 2009 at 11:40:26PM -0500, Jason Edgecombe wrote: > >> I guess setting things for renewable tickets longer than 7 days or >> running the jobs in local disk will be easiest. >> >> We have a 7 day normal/renewable lifetime. What length do other sites have?

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-03-02 Thread Nicolas Williams
On Sat, Feb 28, 2009 at 11:40:26PM -0500, Jason Edgecombe wrote: > I guess setting things for renewable tickets longer than 7 days or > running the jobs in local disk will be easiest. > > We have a 7 day normal/renewable lifetime. What length do other sites have? I have seen sites use on the ord

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-03-02 Thread Hugo Meiland
Jason Edgecombe wrote: > We have users who need to run long-running jobs and store their files in > AFS during the run. > > I've read the k5start and k5renew man pages, but I don't see how I can > have users type in their password when they start a job and have the > tickets and tokens keep bein