On (11/10/17 14:44), Thomas Beaudry wrote:
Hi Lukas,
I'm sorry i wasn't clear enough, the problem has been evolving, I no longer think
there is an issue with autofs
Essentially what is happening on 1 machine is that kerebos tickets are getting destroyed
before their expiration. These tickets should be valid for 10 hours, but after 30+ mins,
when a user types klist, they don't see their ticket anymore.
What type of kerberos ccache do you use?
FILE, DIR, KEYRING ...
Because sssd does not call equivalent to "kdestroy"
It can refresh krb5 ticket if it is online and option
krb5_renew_interval is configured
You can find more details in man sssd-krb5.
LS