krb5 ticket cache

[Donn Cave]

Quoth kerberos at northsailor.de (Klaas Hagemann):
...
| after doing kinit the kerberos client creates a krb5 ticket cache file 
| like /tmp/krb5cc_506.
|
| Another user having root privileges on this client can optain these 
| ticket cache file and have the network wide rights of the owner of this 
| ticket.
|
| Is there any chance that the ticket is stored in memory rather than on 
| the local disk? can i configure it in any way?

Yes!  Try this:

  $ KRB5CCNAME=MEMORY:0 kinit
  Password for me at there.where:

Now look for your credentials in /tmp, and they won't be there.  They
won't be anywhere else either, they're just gone, along with the kinit
process that owned that storage, but that would be what you wanted.

	Donn Cave, donn at u.washington.edu