Can Kerberos ticket location be changed ? (4281674)

Yes it is possible to change the location in the kerberos ticket's stored on the client by modifying the default_cc_name setting in the /etc/opt/quest/vas/vas.conf file. 

Here is some information from the man vas.conf page which is available in HTML format in the product download and by unix man command on the machine:

 

 

 

default_cc_name =

Default value: FILE:/tmp/krb5cc_${uid}

 

This option defines the location of users' credential caches that are created when they log in or use vastool kinit. This value can be customized and supports the following macros: ${uid}, ${homedir}, and ${pwname}. ${uid} will be replaced by the user's Unix UID (pw_uid) as returned by a getpwnam() call. ${homedir} will be replaced with the user's home directory (pw_homedir) as returned by the getpwnam() function. ${pwname} will be replaced by the user's Unix login name (pw_name) as returned by getpwnam(). 

 

 

For example, the following configuration will create ticket caches in a user specific tmp location (the directory must exist already). 

[libdefaults]

default_cc_name = FILE:/tmp/${pwname}/krb5cc_${uid}

 

 

 

This example will create the ticket cache in the user's home directory during login as a hidden file. 

 

[libdefaults]

default_cc_name = FILE:${homedir}/.krb5cc

 

 

 

Note that the use of '$' as the expansion character is QAS specific, most Kerberos implementations use '%'. In addition, ${homedir} and ${pwname} are extensions to Heimdal made by QAS, and other Kerberos implementations may not understand them.