The way we get a token refresh is by once a week (or more if needed) doing a
klog on any of the console windows (xterm, konsole, console, etc..), which
refreshes the tokens for the desktop. There was a big debate on having
crontab's refresh tokens, or some automatic way, but it was decided that
manually was best.
As far as having the xlock refresh the tokens when the password was put in, we
didn't even look at that because some were using xlock, some xscreensaver,
some the kde screensaver. (by the way, on RedHat 6.2, the kde screensaver is
able to use xscreensaver, but if the password is needed on that, it won't work
using the AFS password)
Troy
Jaime Mantel wrote:
>
> I was not able to get a token refresh in the xlock pam module by adding
> the various
> pam files in pam.d. I assume it is because the xlock program was not
> built with afs support. Although, I can use my afs password to unlock
> the
> xlock program. I also assume that updating tokens will not happen with
> other
> services since they have not been built with afs support either.
>
> Jaime
--
__________________________________________________
Troy Dawson [EMAIL PROTECTED] (630)840-6468
Fermilab ComputingDivision/OSS CSS Group
__________________________________________________
