marc <[email protected]> writes: > I would like to have a pam_module that can have the same > functionnality that krenew.
I assume you mean that kicks off a background krenew process? A PAM module that literally does the same thing as krenew (namely renews your existing credentials) doesn't make a lot of sense to me, since one generally just got new credentials as part of the PAM authentication. > I've try to use pam_script.so on session opening to launch "krenew -K > 60 -b &", but it's running as root and not with the user right and > then can't know which ticket cache it has to renew. > Does someone could give me links to a kind of solution ? Normally one does this by adding an invocation of krenew to the shell initialization files for the user (or in the system-wide ones if you want it to happen for all users). Doing it from inside a PAM module is a bit trickier. Have you tried the shell initialization file route? -- Russ Allbery ([email protected]) <http://www.eyrie.org/~eagle/> ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
