Configuring cron Jobs
Fermi Kerberos includes the
kcroninit
product for setting up
cron
jobs in a Kerberized environment. It gets installed automatically as
part of the Fermi
kerberos
product.
kcroninit
creates the necessary
cron
principal and keytab file so that
cron
jobs may be authenticated under the user's principal.
kcroninit
can be used on each node where
cron
jobs need to be authenticated, either to get AFS tokens or tickets for
remote access to other Kerberos systems.
To configure a
cron
job, follow this procedure:
Make sure
you're at the console or on an encrypted channel!- Run kcroninit to
create the
cron
principal and keytab file. You will have to type your Kerberos
password.
- Use the
kcron command
to initiate the
cron
jobs in an authenticated manner.
- For access to remote
systems, the .k5login file on the
remote end must allow access to
<user>/cron/<host>.<domain>@FNAL.GOV. If you're just
creating this file, don't forget to add your
<user>@FNAL.GOV principal,
too.
This is documented in section
10.3.1
Specific-User Processes (cron Jobs).
fbatch and LSF
These programs can be used in the same way after Kerberization
as before.
