...
| Code Block |
|---|
it23677> kinit it23677> klist Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: guestsi@AGRESEARCH.CO.NZ Valid starting Expires Service principal 08/14/2024 0817:4818:5635 08/1415/2024 03:18:48:5635 krbtgt/AGRESEARCH.CO.NZ@AGRESEARCH.CO.NZ renew until 08/1421/2024 17:18:48:5630 |
Note the 10 hour expiry time visible here.If 10 hour expiry turns out to be a problem for long-running jobs, the ticket expiry times for tickets issued by Active Directory will need to be increased
Tickets can be renewed up to 7 days without a password, using kinit -R. Note that each renewal will only last 10 hours.
Explanation
Historically on legacy HPC, database credentials were stored in the filesystem, and users were probably oblivious to the fact that they were being fetched on their behalf to authenticate with the database.
...