Return
-
Title
Failure to cache credentials. Error: "No credentials cache found while getting the ccache pri -
Description
Quest Authentication Services (QAS) on Mac OSX 10.6 failure to cache credentials.
Upon login and doing a 'kinit' we get this error:
"klist: No credentials cache found while getting the ccache principal"
After doing a 'kdestroy -A' and 'kinit' the credentials are back. -
Cause
The CCache Server is taking a while longer than usual to start up. Seen on slower machine or older architecture.
-
Resolution
Upgrade to QAS 3.5.2.79 maintenance release version.
WORKAROUND:
1 - Edit the /etc/authorization file, and move the following two lines close to the end close to the end; just before the <string>loginwindow:done</string> :<string>VASMechanism:setcred,privileged</string>
<string>VASMechanism:userpolicy,privileged</string>
It should look similiar to the following:
<dict>
<key>class</key>
<string>evaluate-mechanisms</string>
<key>comment</key>
<string>Login mechanism based rule. Not for general use, yet.</string>
<key>mechanisms</key>
<array>
<string>VASMechanism:policywait</string>
<string>VASMechanism:init,privileged</string>
<string>VASMechanism:checkaccess</string>
<string>SSOPlugin:sso,privileged</string>
<string>builtin:smartcard-sniffer,privileged</string>
<string>loginwindow:login</string>
<string>builtin:reset-password,privileged</string>
<string>builtin:auto-login,privileged</string>
<string>builtin:authenticate,privileged</string>
<string>loginwindow:success</string>
<string>SyncAuthPlugin:sync</string>
<string>HomeDirMechanism:login,privileged</string>
<string>HomeDirMechanism:status</string>
<string>MCXMechanism:login</string>
<string>VASMechanism:setcred,privileged</string>
<string>VASMechanism:userpolicy,privileged</string>
<string>loginwindow:done</string>
</array>
</dict> -
Change Request
22819