#! /bin/sh
# $Header: /global/src/etc/cron.hourly/RCS/cl-fresh-check-tgt,v 1.3 2018/04/30 20:46:41 pb22 Exp $
# Ensure that /etc/krb5cc_<n> exists - if not ln to <n>_kt0
MAILTO=cl-check-tgt-fresh+fc-root-mail@cl.cam.ac.uk
# This is called from cron.hourly, i.e. every 60 mins.
# Look for TGTs over 1 cycle old hours old -- 1 hour + 10 mins triggers email
# HOWEVER 'krenew' refreshes (i.e. creates new cache files) even if it gains
# nothing so also look for TGT server generated files which cannot refresh
# (in case the TGT server isn't generating new TGTs as it should)
v=${V-}
last=true
for f in /TGTs/krb5cc_*; do u=$(echo $f | sed 's/.*cc_//;s/_.*//'); krenew -k $f || last=false; chown $v $u $f; done
find /TGTs/krb5cc_* -mmin +70 -ls | grep . && last=false
$last
