Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-03-19 Thread Rainer Laatsch
At our AFS cell rrz.uni-koeln.de, we run Sun's batch system SGE. We expect on job submission the user has an AFS token. Just that. This gets transferred as a special encrypted comment within the job. The SGE is AFS aware. On job start and every refresh period (say some hours) the job shephard,

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-03-16 Thread Simon Wilkinson
On 28 Feb 2009, at 23:04, Thomas Kula wrote: > On Sat, Feb 28, 2009 at 05:42:58PM -0500, Jason Edgecombe wrote: >> We have users who need to run long-running jobs and store their >> files in >> AFS during the run. >> >> I've read the k5start and k5renew man pages, but I don't see how I >> can

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-03-02 Thread Nicolas Williams
On Mon, Mar 02, 2009 at 09:02:59PM -0500, Jason Edgecombe wrote: > Nicolas Williams wrote: > >I have seen sites use on the order of months for the renewable ticket > >lifetime, but still hours for normal ticket lifetime. If you already > >use seven days for renew life you might as well double it -

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-03-02 Thread Jason Edgecombe
Nicolas Williams wrote: > On Sat, Feb 28, 2009 at 11:40:26PM -0500, Jason Edgecombe wrote: > >> I guess setting things for renewable tickets longer than 7 days or >> running the jobs in local disk will be easiest. >> >> We have a 7 day normal/renewable lifetime. What length do other sites have?

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-03-02 Thread Nicolas Williams
On Sat, Feb 28, 2009 at 11:40:26PM -0500, Jason Edgecombe wrote: > I guess setting things for renewable tickets longer than 7 days or > running the jobs in local disk will be easiest. > > We have a 7 day normal/renewable lifetime. What length do other sites have? I have seen sites use on the ord

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-03-02 Thread Hugo Meiland
Jason Edgecombe wrote: > We have users who need to run long-running jobs and store their files in > AFS during the run. > > I've read the k5start and k5renew man pages, but I don't see how I can > have users type in their password when they start a job and have the > tickets and tokens keep bein

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-03-01 Thread Jason Edgecombe
Russ Allbery wrote: > Jason Edgecombe writes: > >> I guess setting things for renewable tickets longer than 7 days or >> running the jobs in local disk will be easiest. >> >> We have a 7 day normal/renewable lifetime. What length do other sites >> have? >> > > Seven days here as well. Tha

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-02-28 Thread Russ Allbery
Jason Edgecombe writes: > I guess setting things for renewable tickets longer than 7 days or > running the jobs in local disk will be easiest. > > We have a 7 day normal/renewable lifetime. What length do other sites > have? Seven days here as well. That's also our limit on how long we let comp

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-02-28 Thread Jason Edgecombe
Russ Allbery wrote: > Jason Edgecombe writes: > > >> We have users who need to run long-running jobs and store their files in >> AFS during the run. >> >> I've read the k5start and k5renew man pages, but I don't see how I can >> have users type in their password when they start a job and have t

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-02-28 Thread Russ Allbery
Thomas Kula writes: > I don't think k5start has an option that prompts you for a password > *and* remembers it to keep renewing credentials on your behalf, but > since I always just use the keytab option I'm not as familiar with that > use of k5start. k5start intentionally doesn't support this b

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-02-28 Thread Russ Allbery
Jason Edgecombe writes: > We have users who need to run long-running jobs and store their files in > AFS during the run. > > I've read the k5start and k5renew man pages, but I don't see how I can > have users type in their password when they start a job and have the > tickets and tokens keep bein

Re: Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-02-28 Thread Thomas Kula
On Sat, Feb 28, 2009 at 05:42:58PM -0500, Jason Edgecombe wrote: > We have users who need to run long-running jobs and store their files in > AFS during the run. > > I've read the k5start and k5renew man pages, but I don't see how I can > have users type in their password when they start a job a

Long-running jobs with renewal of krb5 tickets and AFS tokens

2009-02-28 Thread Jason Edgecombe
We have users who need to run long-running jobs and store their files in AFS during the run. I've read the k5start and k5renew man pages, but I don't see how I can have users type in their password when they start a job and have the tickets and tokens keep being renewed. How can I do this? Th