krb5-auth-dialog does not auto-renew renewable tickets
Bug #104815 reported by
Matthew L. Dailey
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
krb5-auth-dialog (Ubuntu) |
Fix Released
|
Wishlist
|
Unassigned |
Bug Description
Binary package hint: krb5-auth-dialog
This is more of a wishlist item than a bug, but it would be nice for krb5-auth-dialog to auto-renew renewable tickets and then only prompt when reaching final expiration. For example, we're getting kerberos tickets from Microsoft AD (gasp!), and we can get 10-hour tickets that are renewable for up to seven days. Rather than prompting the user every ten hours, it's nice for them only to be promted every seven days, with auto-renewals happening in between. This functionality would be similar to the 'krenew' program from the kstart package (http://
Changed in krb5-auth-dialog: | |
importance: | Undecided → Wishlist |
To post a comment you must log in.
Here is my patch to implement this functionality. I've simply added an auto-renew function that tries to renew existing kerberos credentials. It is called from the 'credentials_ expiring_ real' function so this auto-renewal is attempted before doing the expiration time calculation and the user will then be prompted if the renewal results in a final expiration that is less than MINUTES_ BEFORE_ PROMPTING.
Note that this patch also includes my fix for bug #73550.