krb5-auth-dialog does not auto-renew renewable tickets

[Matthew L. Dailey]

Binary package hint: krb5-auth-dialog

This is more of a wishlist item than a bug, but it would be nice for krb5-auth-dialog to auto-renew renewable tickets and then only prompt when reaching final expiration. For example, we're getting kerberos tickets from Microsoft AD (gasp!), and we can get 10-hour tickets that are renewable for up to seven days. Rather than prompting the user every ten hours, it's nice for them only to be promted every seven days, with auto-renewals happening in between. This functionality would be similar to the 'krenew' program from the kstart package (http://www.eyrie.org/~eagle/software/kstart/).

[Matthew L. Dailey (matthew-l-dailey)]

Here is my patch to implement this functionality. I've simply added an auto-renew function that tries to renew existing kerberos credentials. It is called from the 'credentials_expiring_real' function so this auto-renewal is attempted before doing the expiration time calculation and the user will then be prompted if the renewal results in a final expiration that is less than MINUTES_BEFORE_PROMPTING.

Note that this patch also includes my fix for bug #73550.

[Matt Mossholder (matt-mossholder)]

I can confirm the initial report. I haven't tried the posted path.

   --Matt

[Matthew L. Dailey (matthew-l-dailey)]

I was inspired by Daniel Holbach's message on ubuntu-devel this morning and turned this patch into a (hopefully) nice debdiff that I've attached to bug #73550. It includes both that bug and this one.

[Timo Aaltonen (tjaalton)]

This should be fixed since version 0.8.