Ok. Makes sense. I’ll use that solution too.
> On Aug 14, 2022, at 4:35 PM, Jochen Kellner wrote:
>
> Charles Hedrick via FreeIPA-users
> writes:
>
>> it's active, but it seems not to do anything:
>>
>> ● ipa-ccache-sweep.timer - Remove Expired Kerberos Credential Caches
>> Loaded:
Charles Hedrick via FreeIPA-users
writes:
> it's active, but it seems not to do anything:
>
> ● ipa-ccache-sweep.timer - Remove Expired Kerberos Credential Caches
> Loaded: loaded (/usr/lib/systemd/system/ipa-ccache-sweep.timer; enabled;
> vendor preset: disabled)
> -
>
> I believe
it's active, but it seems not to do anything:
● ipa-ccache-sweep.timer - Remove Expired Kerberos Credential Caches
Loaded: loaded (/usr/lib/systemd/system/ipa-ccache-sweep.timer; enabled;
vendor preset: disabled)
Active: active (elapsed) since Thu 2022-08-11 11:22:44 EDT; 3 days ago
Charles Hedrick via FreeIPA-users
writes:
> RHEL 9.0. /run/ipa/ccaches is filling with credential caches. Many are too
> old to be valid.
>
> I assume it's safe to have a cron job delete any more than a day old?
> (that's our maxmum lifetime.) I can't see the lifetime directly,
> because they