Ah. Found the reason why ktkt_warnd didn't renew the tickets. Apparently one needs to modify /etc/krb5/warn.conf since that feature by default seems to be disabled...
Changing the line: * terminal 30m to: * renew:log-failure terminal 30m works much better. Ok... That solves the ticket-autorefresh issue. Though I still think that xscreensaver should handle a non-readable $HOME in a better way... It's not good to have screen locking program that will lock up "forever" (from a users point of view) if they are away longer than the 'refresh until' timeout. (Say for example they are way on a vacation). I wonder if it isn't leaking file descriptors too. When I kill'ed it this time it had 119 open files (see attached pfiles and pstack outputs). -- This message posted from opensolaris.org -------------- next part -------------- A non-text attachment was scrubbed... Name: xscreensaver.pfiles.out Type: application/octet-stream Size: 10688 bytes Desc: not available URL: <http://mail.opensolaris.org/pipermail/xwin-discuss/attachments/20081107/1ea96e3f/attachment.obj> -------------- next part -------------- A non-text attachment was scrubbed... Name: xscreensaver.pstack.out Type: application/octet-stream Size: 752 bytes Desc: not available URL: <http://mail.opensolaris.org/pipermail/xwin-discuss/attachments/20081107/1ea96e3f/attachment-0001.obj>
