[Freeipa-users] Re: kinit: KDC can't fulfill requested option while renewing credentials - which approach?
I'm supporting engineers who have running long running jobs that are storing their
data via NFSv4 with krb5 sec. In some cases, the ticket needs to be renewal for more
than a day. Possibly several days.
Some of the users in this category are accustomed to using "kinit -R". This is
obviously done on per-user basis, and some care is taken to whittle down the privileges of
the principal to what it needs for access the data.