Renewing Tokens for AFS

1
Renewing Tokens for AFS
2
Preliminary Notes

• Active UMBC (AFS) account exists for the user
• AFS accounts include access to systems such as
  gl.umbc.edu and umbc7.umbc.edu
• Non-AFS accounts include access to systems such
  as cs.umbc.edu and umbc2.umbc.edu (for which this
  procedure will NOT work!)
• User has been logged on for 24 hours

3
Tokens

• An ID
• Contains users time stamp
• Contains users life time
• Keeps time records for the duration of a login
  session
• Expires after 24 hours

4
When Tokens Expire

• To renew tokens
• At the UNIX command line prompt, type
• klog or kinit
• Where
• klog - kernel error logging interface
• kinit - kernel initiation
• In this case, we will use kinit
• User verification will be required via password

5
Executing the Command
6
Run-away or Unusual Processes

• Make sure that no run-away or unusual process
  exist
• This may be resulting in the token expirations
• To retrieve a list of running processes
• Type the following at the UNIX command prompt
• ps -fu ltusernamegt

7
Executing the Command
8
Purposes for Verifying Running Processes

• To make sure a process has not been left running
  by mistake
• To make sure no unusual process exists
• May suggest suspicious activity
• Especially if user is logged in via insecure
  TELNET!

9
Troubleshooting
Problem Possible Cause Solution
The kinit command cannot be executed The system is confused System is experiencing problems Kill current session and login again If user cannot login again wait it is probably the system!
User notes excessive or unusual processes running in his/her account User may have left an old process running Someone else may have control of account Contact UNIX consultant to help fix the problem/kill unnecessary processes
10

• Questions?