From 3a985922b77fcd82c21708595a8c37470cbf929c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Mon, 13 Dec 2004 17:19:42 +0000 Subject: [PATCH] clarify credentials refreshing stuff git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14396 ec53bebd-3082-4978-b11e-865c3cabbd6b --- doc/setup.texi | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/doc/setup.texi b/doc/setup.texi index b8d39cfec..f1f406118 100644 --- a/doc/setup.texi +++ b/doc/setup.texi @@ -884,14 +884,18 @@ service@@host$ kinit --cache=/var/run/service_krb5_cache \ service-principal@@EXAMPLE.ORG @end example -Long running services might need credentials longer then the expiration -time of the tickets. kinit can run in a mode that refreshes the -tickets before the expire. This is useful for services that write into -AFS and other distributed file systems using Kerberos. +Long running services might need credentials longer then the +expiration time of the tickets. kinit can run in a mode that refreshes +the tickets before they expire. This is useful for services that write +into AFS and other distributed file systems using Kerberos. To run the +long running script, just append the program and arguments (if any) +after the principal. kinit will stop refreshing credentials and remove +the credentials when the script-to-start-service exits. @example service@@host$ kinit --cache=/var/run/service_krb5_cache \ - --keytab=/etc/krb5-service.keytab \ - service-principal@@EXAMPLE.ORG script-to-start-service + --keytab=/etc/krb5-service.keytab \ + service-principal@@EXAMPLE.ORG \ + script-to-start-service argument1 argument2 @end example