GSSAPI for various murder component setups

Dan White dwhite at olp.net
Sat Jun 23 14:18:29 EDT 2012


On 06/22/12 11:31 -0700, Stephen Ingram wrote:
>One other question though, how often do you refresh your credential
>cache? From the few examples I've seen, most people seem to refresh
>very frequently (anywhere from 6 minutes to 1 hour). Given that most
>tickets can last up to 10 or 12 hours, I'm guessing the shorter life
>is for security or some other reason?

I update once per hour. Since my kinit's are done from cron, if the ticket
refresh doesn't work, I get an email containing the error. It gives me up
to 9 hours to fix whatever issue is causing the failure.

-- 
Dan White


More information about the Info-cyrus mailing list