> This should cover all cases where credentials are stored in the user's
> home directory and are not bound to a specific X display. So this should
> apply to the kerberos credentials cache.

This probably still won't work in our case since RHA is not going to pick up
the correct ccache file from an environment variable.  The screensaver does
since it is part of the same environment.

> How does AFS store/cache its credentials?

It uses PAGs, which based on my limited understanding, are a form of
pseudo-environment where all processes included in it have access to the
same set of AFS tokens.  That is, AFS tokens are managed in-kernel, as
opposed to Kerberos tickets which are currently managed by storing in a file
in /tmp and setting the KRB5CCNAME env var.  Hence, a token refresh would
need to be triggered from something already inside the PAG.

William Yang

_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to