Retour
-
Titre
Kerberos ticket is missing after it is deleted and the user logs out and back in again -
Description
If a user deletes ( rm ) or destroys ( vastool kdestroy) their Kerberos Credentials Cache (krb5cc_UID) file, then logs out and immediately logs back in a new ccache file is not generated.
But if the user waits for about 1 minute before logging back in then the file is generated.
-
Cause
This is expected behavior. The auth daemon ( vastool info processes ) will cache a login for a minute allowing the user to login even though their Kerberos Credentials Cache has been deleted.
-
Résolution
To generate a new ccache file immediately after logging out run the following command in a separate window and then login
# /opt/quest/libexec/vas/sugi/asdcom SendAuthFlush