Jesse Becker <[email protected]> writes:
> Well, if you enforce hard wall-clock limits on your queues, and the > limit is less than the time the krb ticket is valid, you should be > okay. [See my previous message.] > Otherwise, I think you need a way to automatically renew them. This > thread has two scripts--*untested by me*--but may work. > > http://www.linuxquestions.org/questions/linux-software-2/automatic-renewal-of-kerberos-tickets-792305/ There are renewal mechanisms written by Kerberos experts, e.g. kstart for daemons and kcm for login sessions, but they probably don't help, insofar as renewal is the problem. (Running kinit to renew a TGT is trivial for root in typical unixy installations, which is why you may not trust the system with it, but I'm not sure about MS Windows and MacOS.) GE has hooks for AFS ticket handling, but only at submission and job start time, so if a job waits longer than the ticket lifetime, you lose, in the absence of some other mechanism. We should probably try to address that. _______________________________________________ users mailing list [email protected] https://gridengine.org/mailman/listinfo/users
