On Sat, Mar 3, 2018 at 3:46 PM, Harald Barth <[email protected]> wrote: > > > Both MIT kinit and heimdal kinit honor the KRB5CCNAME environment > variable which has the form TYPE:location thus a typical way to set > your FILE cache is: > > export KRB5CCNAME=FILE:/tmp/krb5cc_`id -u` > > Btw: As FILE: is the oldest ticket cache type and the default, any > file name will do. For example: > > export KRB5CCNAME=/tmp/whatever > > will set it to /tmp/whatever > > Huh. Thats pretty weird. Using the KRB5CCNAME it works fine.
[gsgatlin@localhost ~]$ export KRB5CCNAME=FILE:/tmp/krb5cc_`id -u` [gsgatlin@localhost ~]$ kinit gsgatlin Password for [email protected]: [gsgatlin@localhost ~]$ klist Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: [email protected] Valid starting Expires Service principal 03/03/2018 16:40:27 03/04/2018 13:55:27 krbtgt/[email protected] renew until 03/10/2018 16:40:22 [gsgatlin@localhost ~]$ aklog -c eos.ncsu.edu -k EOS.NCSU.EDU [gsgatlin@localhost ~]$ aklog -c unity.ncsu.edu -k EOS.NCSU.EDU [gsgatlin@localhost ~]$ aklog -c bp.ncsu.edu -k EOS.NCSU.EDU [gsgatlin@localhost ~]$ tokens Tokens held by the Cache Manager: User's (AFS ID 19149) tokens for [email protected] [Expires Mar 4 13:55] User's (AFS ID 19149) tokens for [email protected] [Expires Mar 4 13:55] User's (AFS ID 19149) tokens for [email protected] [Expires Mar 4 13:55] --End of list-- I couldn't get the heimdal-kinit to work right but this setting the KRB5CCNAME=FILE:/tmp/krb5cc_`id -u` is fine. I can just add that to my auth shell script that does the kinit and the aklogs stuff on ppc64. Its weird that it didn't work without it but I'm happy it even works at all. Thanks you! :) I can edit files in my home directory so I know its working now. Thank you again for your help.
