https://bgstack15.ddns.net/blog/enContents © 2022 <a href="mailto:bgstack15@gmail.com">bgstack15</a> <a rel="license" href="https://creativecommons.org/licenses/by-sa/4.0/"> <img alt="Creative Commons License BY-SA" style="border-width:0; margin-bottom:12px;" src="https://bgstack15.ddns.net/.images/l_by-sa_4.0_88x31.png"></a>Sun, 27 Feb 2022 04:04:58 GMTNikola (getnikola.com)http://blogs.law.harvard.edu/tech/rsshttps://bgstack15.ddns.net/blog/posts/2021/11/14/my-kinit-invocation/bgstack15<p>Some of my systems use a fingerprint reader to allow user login. On these systems, I use LUKS encryption so don't worry, I still need a passphrase at boot time.</p> <p>When pam authenticates me with a fingerprint, it doesn't perform kerberos authentication which facilitates things like seamless ssh authentication. So I have to manually run kinit. I always run it with a few parameters:</p> <pre class="code literal-block"><span></span><code>kinit -r 14d -l 14d -f -p </code></pre> <p>The <strong>r</strong> sets renewable life to 14 days. The <strong>l</strong> (lima) sets the lifetime to 14 days. And <strong>f</strong> requests a forwardable ticket, and <strong>p</strong> a proxiable ticket.</p> <h3>See also</h3> <p>Previously, I wrote about <a href="https://bgstack15.ddns.net/blog/posts/2021/02/22/show-kerberos-ticket-status-in-system-tray/">showing kerberos ticket status in the system tray</a>.</p>kerberoskinithttps://bgstack15.ddns.net/blog/posts/2021/11/14/my-kinit-invocation/Sun, 14 Nov 2021 14:16:01 GMT