Static ticket cache name

Russ Allbery rra at stanford.edu
Wed Nov 10 17:12:53 EST 2010


Techie <techchavez at gmail.com> writes:

> Hello is it possible to set a static credential cache name? For
> example force the use of krb5cc_12334.

This is not recommended because it's a potential security issue unless
you're using a non-world-writable directory in which to store your ticket
caches.

> I have a situation where there will only be one user on a box at a time
> and I want to use a static credential cache name. I tried using pam_krb5
> but it is not working.  I also tried setting KRB5CCNAME and
> PAM_KRB5_CCNAME but no success. It may be that this is impossible but
> figure I would ask.

What pam_krb5 module are you using?  Mine has always supported this.  See
the ccache and ccache_dir configuration parameters.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the Kerberos mailing list