[SSSD-users] Re: User Kerberos lifetime ticket.

2017-09-04 Thread Mark London
Jakub - Thanks for the info! I didn't know about keytabs. Much appreciated. - Mark https://kb.iu.edu/d/aumh On 9/4/2017 2:16 PM, Jakub Hrozek wrote: On Mon, Sep 04, 2017 at 01:06:22PM -0400, Mark London wrote: Sumit - Thanks for the info. Some of our users do work directly at the worksta

[SSSD-users] Re: User Kerberos lifetime ticket.

2017-09-04 Thread Jakub Hrozek
On Mon, Sep 04, 2017 at 01:06:22PM -0400, Mark London wrote: > Sumit - Thanks for the info. Some of our users do work directly at the > workstation, so I'm glad to hear that they would get a fresh Kerberos > ticket, when they would have to login via the screen saver, on a daily > basis.. However

[SSSD-users] Re: User Kerberos lifetime ticket.

2017-09-04 Thread Mark London
Sumit - Thanks for the info. Some of our users do work directly at the workstation, so I'm glad to hear that they would get a fresh Kerberos ticket, when they would have to login via the screen saver, on a daily basis.. However, some of these same users, ssh to other workstations, to run job

[SSSD-users] Re: User Kerberos lifetime ticket.

2017-09-04 Thread Sumit Bose
On Fri, Sep 01, 2017 at 04:53:03PM -0400, Mark London wrote: > Lukos - Thanks for responding. You stated that the krb5 ticket is > "renewed" after each authentication. What are all the methods > "authentication"? I.e. when a user logs in using SSSD, that authenticates > against Kerberos, (in