summarylogtreecommitdiffstats
path: root/kstart.service
AgeCommit message (Collapse)Author
2022-09-12always restart on SIGALRMMantas Mikulėnas
k5start uses SIGALRM internally, so a common hack is to send it one from the outside (via `pkill -ALRM k5start` from NetworkManager, for example) to force renewals. However, sometimes that occurs when k5start *doesn't* have its SIGALRM handler set up, so the result is that the service just crashes. (It's not a good hack.)
2022-03-04tell k5start to read the client principal name from keytabMantas Mikulėnas
Allows it to be used with keytabs that don't match the "guessed default" client principal (which is username@LOCALREALM).
2022-02-26adjust .service comments moreMantas Mikulėnas
2022-02-26adjust .service commentsMantas Mikulėnas
2022-02-26enable -t option by default in unit filesMantas Mikulėnas
Makes it easier to use drop-ins for enabling aklog where OpenAFS is actually installed. Don't ask why I have OpenAFS installed, I don't know that myself.
2022-02-22add kstart.serviceMantas Mikulėnas
Keeping the credentials in a keytab is a bit insecure, but... eh, it's on LUKS and it's better than nothing, so I'll use it while GNOME Online Accounts' Kerberos support remains broken. [1][2] [2]: https://gitlab.gnome.org/GNOME/gnome-online-accounts/-/issues/28 [1]: https://gitlab.gnome.org/GNOME/gnome-online-accounts/-/issues/160