Files
gitea-pages/user-guide/kerberos_lifetime.md

759 B

Kerberos for Long Running Programs/Simulations/Shell Sessions

Kerberos tickets get invalid at some point and after they can not be used for authentication any more. This results in e.g. AFS or ssh refusing access.

To check when this will be run klist and in the output check below krbtgt/D.PSI.CH@D.PSI.CH the renew until timestamp:

Valid starting       Expires              Service principal
17.03.2023 09:25:20  17.03.2023 19:25:03  krbtgt/D.PSI.CH@D.PSI.CH
        renew until 24.03.2023 09:25:08

To seamlessly continue you need to obtain a new Kerberos ticket before by running kinit. It will then ask your password and after sucessful authentication there will be a newly acquired Kerberos ticket which will do it again one week.