...
The Kerberos tickets which is needed for database access are issued by AgResearch Active Directory, and have an expiry time of 10 hours, after which a new ticket must be requested, using kinit
.
The current tickets can be seen with klist
...
Note the 10 hour expiry time visible here.
Tickets can be renewed When using the krb5cc.home
module version 0.2.0
or later (which is a default dependency of gquery as of 4/9/2024), tickets are automatically renewed every 4 hours up to 7 days without a password, using kinit -R
. Note that each renewal will only last 10 hours. Note that the current modules may be seen with module list
.
Beyond 7 days, the user needs to kinit
a new ticket, which may be picked up by the existing ticket renewal process, or a new module load gquery
may be required.
Explanation
Historically on legacy HPC, database credentials were stored in the filesystem, and users were probably oblivious to the fact that they were being fetched on their behalf to authenticate with the database.
...