Russ Allbery, Stanford University -- Daemons, PAGs, and Automated Authentication

An overview of the ways of maintaining AFS authentication for a long-running daemon , including the benefits and drawbacks of running it inside or outside of a PAG, with specif ic mention of kstart as a tool that helps. As time allows, an overview of other issues surr ounding authentication of automated processes (srvtab/keytab distribution, maintaining token s for the life of the job, tradeoffs between extended ticket lifetimes and renewing tickets, and isolating authentication from other ticket caches and PAGs).

Slides: k-start