Russ Allbery, Stanford University -- Daemons, PAGs, and Automated Authentication
An overview of the ways of maintaining AFS authentication for a
long-running daemon , including the benefits and drawbacks of running
it inside or outside of a PAG, with specif ic mention of kstart as a
tool that helps. As time allows, an overview of other issues surr
ounding authentication of automated processes (srvtab/keytab
distribution, maintaining token s for the life of the job, tradeoffs
between extended ticket lifetimes and renewing tickets, and isolating
authentication from other ticket caches and PAGs).
Slides: k-start