If a user deletes ( rm ) or destroys ( vastool kdestroy) their Kerberos Credentials Cache (krb5cc_UID) file, then logs out and immediately logs back in a new ccache file is not generated.
But if the user waits for about 1 minute before logging back in then the file is generated.
This is expected behavior. The auth daemon ( vastool info processes ) will cache a login for a minute allowing the user to login even though their Kerberos Credentials Cache has been deleted.
To generate a new ccache file immediately after logging out run the following command in a separate window and then login
# /opt/quest/libexec/vas/sugi/asdcom SendAuthFlush
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center