Hello, we have some issues with long running batch jobs on centos machines (centos 7, sssd 1.16.2 ). After the 10 hours the service ticket runs out, we have a access denied error, but the next requests work. We broke it down to the issue that the service ticket is not renewed ahead of expiration.

What I found was options like krb5_renewable_lifetime and krb5_renew_interval, but they all seem to refer to TGT, not the service ticket. Is there a way to watch and renew service tickets as well? ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Versendet mit Emailn.de - Freemail * Unbegrenzt Speicherplatz * Eigenes Online-Büro * 24h besten Mailempfang * Spamschutz, Adressbuch

_______________________________________________ sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste...

On Thu, Aug 15, 2019 at 03:27:27PM +0200, Peter Tulpen wrote: > Hello, > we have some issues with long running batch jobs on centos machines (centos 7, > sssd 1.16.2 ). > After the 10 hours the service ticket runs out, we have a access denied error, > but the next requests work. > We broke it down to the issue that the service ticket is not renewed ahead of > expiration. Hi, what kind of service/application is this? If I understand it correctly as long as there is a valid TGT the application should just ask for a new service ticket. bye, Sumit > What I found was options like krb5_renewable_lifetime and krb5_renew_interval, > but they all seem to refer to TGT, not the service ticket. > Is there a way to watch and renew service tickets as well? > > > ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ > > Versendet mit Emailn.de - Freemail > > * Unbegrenzt Speicherplatz > * Eigenes Online-Büro > * 24h besten Mailempfang > * Spamschutz, Adressbuch > > _______________________________________________ > sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org > To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste... _______________________________________________ sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste...