Static ticket cache name
Russ Allbery
rra at stanford.edu
Wed Nov 10 17:12:53 EST 2010
Techie <techchavez at gmail.com> writes:
> Hello is it possible to set a static credential cache name? For
> example force the use of krb5cc_12334.
This is not recommended because it's a potential security issue unless
you're using a non-world-writable directory in which to store your ticket
caches.
> I have a situation where there will only be one user on a box at a time
> and I want to use a static credential cache name. I tried using pam_krb5
> but it is not working. I also tried setting KRB5CCNAME and
> PAM_KRB5_CCNAME but no success. It may be that this is impossible but
> figure I would ask.
What pam_krb5 module are you using? Mine has always supported this. See
the ccache and ccache_dir configuration parameters.
--
Russ Allbery (rra at stanford.edu) <http://www.eyrie.org/~eagle/>
More information about the Kerberos
mailing list