On Mon, Sep 04, 2017 at 01:06:22PM -0400, Mark London wrote:
> Sumit - Thanks for the info. Some of our users do work directly at the
> workstation, so I'm glad to hear that they would get a fresh Kerberos
> ticket, when they would have to login via the screen saver, on a daily
> basis.. However, some of these same users, ssh to other workstations, to
> run jobs on multiple workstations, and may stayed logged in, past the SSSD
> lifetime limit. I'm curious if there is a way to warn such people, when
> their Kerberos tickets are about to expire. I.e., to automatically create
> job when they login, that checks the age of their kerberos ticket on a daily
> basis. We will have to look at this issue more closely. Thanks! - Mark
We plan on providing a D-Bus-based notification API eventually:
https://pagure.io/SSSD/sssd/issue/1497
I guess you can poll the ticket in the meantime with a cron job..
For really long-running jobs, maybe it would be best to create a keytab?
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
