[36693] in Kerberos
Re: how to set default TGT file path
daemon@ATHENA.MIT.EDU (Peng Hu PH Pei)
Wed Dec 24 11:37:04 2014
In-Reply-To: <5499953C.2030608@mit.edu>
To: Greg Hudson <ghudson@mit.edu>
Message-ID: <OFE4E463C0.75C3EE6D-ON48257DB8.002FBA4F-48257DB8.003021DC@cn.ibm.com>
From: Peng Hu PH Pei <peipengh@cn.ibm.com>
Date: Wed, 24 Dec 2014 16:45:54 +0800
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============0440387239=="
Errors-To: kerberos-bounces@mit.edu
--===============0440387239==
Content-type: multipart/related;
Boundary="0__=C7BBF72BDFBC3CDF8f9e8a93df938690918cC7BBF72BDFBC3CDF"
--0__=C7BBF72BDFBC3CDF8f9e8a93df938690918cC7BBF72BDFBC3CDF
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: quoted-printable
Put in krb5.conf and run kinit, the TGT is still in /tmp/:
[libdefaults]
default_ccache_name =3D FILE:/var/tmp/krb5cc_%{euid}
Thanks,
Penghu Pei
E-mail: peipengh@cn.ibm.com
Phone: 86-29-68797089 | 18792954566
From: Greg Hudson <ghudson@mit.edu>
To: Shuaijie Wang <wangshuaijie@gmail.com>, kerberos@mit.edu, Peng
Hu PH Pei/China/IBM@IBMCN
Date: 2014/12/24 00:16
Subject: Re: how to set default TGT file path
On 12/23/2014 04:38 AM, Shuaijie Wang wrote:
> By default, kinit will generate TGT file under /tmp. Is there any way=
to
> specify other directory to put TGT in?
Gwenael already pointed out the KRB5CCNAME environment variable. In
addition, MIT krb5 1.11 adds the default_ccache_name krb5.conf variable=
with parameter expansion and the DEFCCNAME configure parameter. These
two new variables support parameter expansion as documented here:
http://web.mit.edu/kerberos/krb5-latest/doc/admin/conf_files/krb5_conf.=
html#parameter-expansion
So for example, you could put in krb5.conf:
[libdefaults]
default_ccache_name =3D FILE:/var/tmp/krb5cc_%{euid}
or at build time:
./configure DEFCCNAME=3D'DIR:/var/krb5/%{username}'
=
--0__=C7BBF72BDFBC3CDF8f9e8a93df938690918cC7BBF72BDFBC3CDF--
--===============0440387239==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============0440387239==--
