Full explanation of the problem for those not familiar with krb5 use
with X:

Scenario: User logins in to X using krb5. Login generates TGT (ticket
granting ticket) with a current timestamp with a (usually) 6-24 hour
expiry time. The TGT is used to get read/write permissions to the
kerberised AFS so the user can read and write their home directory. User
walks away from terminal and comes back after timeout. xscreensaver asks
for password and permits user to unlock terminal.

Problem: xscreensaver doesn't renew the TGT, so user no longer has read
or write permissions on their home directory. Userland applications
crash willy-nilly.

Solution: everything that asks for the krb5 password needs to renew the
TGT.

** Tags added: timeout ui

-- 
doesn't renew tgt when used with xscreensaver
https://launchpad.net/bugs/49956

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to