[SSSD] no krb5 cache produced

John Hodrien J.H.Hodrien at leeds.ac.uk
Mon Apr 29 10:26:21 UTC 2013


On Mon, 29 Apr 2013, steve wrote:

> Hi
> I've got as far as creating the root ticket in /etc/init.d/boot.local 
> which seems to be ok as it happens before anyone hits the automounter. 
> On our system, that'll keep autofs happy for 10 hours so I suppose the 
> cron would need to be set to run at 9 hour 59 minute intervals. Normally 
> the client would have been rebooted by then, but I'd like to be able to 
> just forget about it.
> Could you share your 2 liner autofs script? I guess it would be a kinit 
> -k <some key> but I'm new to all this.

In my case it was:

kinit -k nfs/$HOSTNAME -c /tmp/krb5cc_machine_KRB5_DOMAIN
chcon -t gssd_tmp_t /tmp/krb5cc_machine_KRB5_DOMAIN

I wasn't clear that there was an easy way to preset the context, so used chcon
after the event.

Also, why not renew hourly, rather than cut it fine?

jh



More information about the sssd-devel mailing list