Files
gitea-pages/user-guide/kerberos_lifetime.md
T
2023-03-17 09:31:11 +01:00

16 lines
759 B
Markdown

# Kerberos for Long Running Programs/Simulations/Shell Sessions
Kerberos tickets get invalid at some point and after they can not be used for authentication any more. This results in e.g. AFS or ssh refusing access.
To check when this will be run `klist` and in the output check below `krbtgt/D.PSI.CH@D.PSI.CH` the `renew until` timestamp:
```
Valid starting Expires Service principal
17.03.2023 09:25:20 17.03.2023 19:25:03 krbtgt/D.PSI.CH@D.PSI.CH
renew until 24.03.2023 09:25:08
```
To seamlessly continue you need to obtain a new Kerberos ticket before by running `kinit`.
It will then ask your password and after sucessful authentication there will be a newly acquired Kerberos ticket which will do it again one week.