[24672] in Kerberos
Re: nfsv4 sec=krb5 + xscreensaver
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Tue Sep 20 16:06:07 2005
Message-ID: <43303CF9.3060507@anl.gov>
Date: Tue, 20 Sep 2005 11:46:49 -0500
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: FM <dist-list@lexum.umontreal.ca>
In-Reply-To: <432F260E.4090509@lexum.umontreal.ca>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: Mailing List Kerberos <kerberos@mit.edu>
Errors-To: kerberos-bounces@mit.edu
FM wrote:
> Hello,
>
> We are are using MIT krb5 + LDAP on server and pam_krb5
> (pam_krb5-2.1.2-1) on clients
>
> I'd like to use nfsv4 sec=krb5 for my home users folers.
>
> with sec=krb5, the nfs server will check the TGT of the user, the prob is :
> when you unlock you computer, yout TGT is not creat of renew.
> So user nee to kinit again.
>
> So , I suppose, that I won't be able to use my home folder after the TGT
> expiration.
>
>
> Is there a way to renew TGT when locking computer with xscreensaver ?
You mean when unlocking? Yes, if the xscreensaver calls PAM,
the pam_krb5 could do this using the password provided for unlocking.
We do this on Solaris. Your pam_krb5 may be able to reuse the same cache.
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
