From nobody Fri Oct 11 19:46:07 2024
X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4XQHDd3DWGz5ZKCZ
	for <freebsd-questions@mlmmj.nyi.freebsd.org>; Fri, 11 Oct 2024 19:46:09 +0000 (UTC)
	(envelope-from lexi@le-fay.org)
Received: from fuchsia.eden.le-Fay.ORG (fuchsia.eden.le-fay.org [IPv6:2001:8b0:aab5:107::11])
	by mx1.freebsd.org (Postfix) with ESMTP id 4XQHDc3vcvz4BKM
	for <freebsd-questions@freebsd.org>; Fri, 11 Oct 2024 19:46:08 +0000 (UTC)
	(envelope-from lexi@le-fay.org)
Authentication-Results: mx1.freebsd.org;
	dkim=pass header.d=le-fay.org header.s=fuchsia header.b=JcB4WkUU;
	spf=pass (mx1.freebsd.org: domain of lexi@le-fay.org designates 2001:8b0:aab5:107::11 as permitted sender) smtp.mailfrom=lexi@le-fay.org;
	dmarc=none
Received: from iris.eden.le-Fay.ORG (iris.eden.le-fay.org [IPv6:fd12:8247:3:1::7])
	by fuchsia.eden.le-Fay.ORG (Postfix) with ESMTP id F363E31B51
	for <freebsd-questions@freebsd.org>; Fri, 11 Oct 2024 19:46:07 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=le-fay.org; s=fuchsia;
	t=1728675968; bh=yYTj+GKdVUMmmPrIyru2WrK3VV7H1YTuGhyMPE6ysu8=;
	h=Date:To:From:Subject;
	b=JcB4WkUUfbeacVaTjdiKWdg7AX6GiVOb36Ysv+Siff44KALzAHBz7SbzLPy8IQWqq
	 HKjEZ0vB415WyJkyBjT1jPKE/Zvi2cTNHSPxaW8ro1fUvAdBWpdD/ACURVIiyHAfYU
	 K1R+mAQnxb5U9iQ0S2n5jSbuEX86+MRnI0JwSgbo=
Received: from [IPV6:2001:8b0:aab5:c110:34f9:44b0:3400:c997] (unknown [IPv6:2001:8b0:aab5:c110:34f9:44b0:3400:c997])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384)
	(No client certificate requested)
	by iris.eden.le-Fay.ORG (Postfix) with ESMTPSA id 11A842C0489
	for <freebsd-questions@freebsd.org>; Fri, 11 Oct 2024 20:46:06 +0100 (BST)
Message-ID: <98c10355-6878-4d92-89c6-c32d97e635b1@le-fay.org>
Date: Fri, 11 Oct 2024 20:46:07 +0100
List-Id: User questions <freebsd-questions.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-questions
List-Help: <mailto:questions+help@freebsd.org>
List-Post: <mailto:questions@freebsd.org>
List-Subscribe: <mailto:questions+subscribe@freebsd.org>
List-Unsubscribe: <mailto:questions+unsubscribe@freebsd.org>
X-BeenThere: freebsd-questions@freebsd.org
Sender: owner-freebsd-questions@FreeBSD.org
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-GB
To: freebsd-questions@freebsd.org
From: Lexi Winter <lexi@le-fay.org>
Subject: daemon to auto-renenew Kerberos tickets?
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Spamd-Result: default: False [-2.39 / 15.00];
	SUBJECT_ENDS_QUESTION(1.00)[];
	NEURAL_HAM_LONG(-1.00)[-1.000];
	NEURAL_HAM_MEDIUM(-1.00)[-1.000];
	NEURAL_HAM_SHORT(-1.00)[-0.996];
	R_DKIM_ALLOW(-0.20)[le-fay.org:s=fuchsia];
	R_SPF_ALLOW(-0.20)[+ip6:2001:8b0:aab5:107::11:c];
	RCVD_NO_TLS_LAST(0.10)[];
	MIME_GOOD(-0.10)[text/plain];
	XM_UA_NO_VERSION(0.01)[];
	RCVD_VIA_SMTP_AUTH(0.00)[];
	ARC_NA(0.00)[];
	MIME_TRACE(0.00)[0:+];
	ASN(0.00)[asn:20712, ipnet:2001:8b0::/32, country:GB];
	FROM_HAS_DN(0.00)[];
	MLMMJ_DEST(0.00)[freebsd-questions@freebsd.org];
	MID_RHS_MATCH_FROM(0.00)[];
	RCVD_COUNT_TWO(0.00)[2];
	FROM_EQ_ENVFROM(0.00)[];
	DMARC_NA(0.00)[le-fay.org];
	TO_DN_NONE(0.00)[];
	PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org];
	TO_MATCH_ENVRCPT_ALL(0.00)[];
	RCPT_COUNT_ONE(0.00)[1];
	DKIM_TRACE(0.00)[le-fay.org:+]
X-Rspamd-Queue-Id: 4XQHDc3vcvz4BKM
X-Spamd-Bar: --

hello,

let's say i run 'kinit --renewable' and get a ticket with a lifetime of 
10h which is renewable for 5d.  is there some kind of daemon i can run 
that automatically renew this ticket until the renewable period runs 
out, until i log out?

using MIT Kerberos for Windows, this happens automagically as long as 
i'm logged in, but i can't find any way to do this in FreeBSD.

i understand i could crontab 'kinit -R' or something like that, but i'm 
hoping for something that does this only for logged-in users, but also 
for all users who are logged-in.