Solaris

Does anyone have any idea what the -F option is for /usr/sbin/nscd? The option is not listed in the man pages.

I have recently started seeing these processes after setting up Kerberos/AD authentication for Solaris 10 clients.

That's an private flag telling this nscd instance is a forker, whatever that means. Probably nothing to worry about.
Have a look at the source code if you want to investigate the internals:
Cross Reference: /onnv/onnv-gate/usr/src/cmd/nscd/server.c

Thanks jlliagre! Do you know why nscd is forking processes with -F for each user connected to the system? I only see this behavior after enabling the ldap client.

Ultimately, I'm trying to get rid of these annoying error messages from the forked nscd processes...

Code:

nscd[19818]: GSSAPI Error: No credentials were supplied, or the credentials were unavailable or inaccessible (No credentials cache file found)

The forked nscd process is looking for a file named /tmp/krb5cc_{uid}. The only kerberos cache file is /tmp/krb5cc_0, for the root user.

There might be something wrong with your ldap/kerberos configuration.
https://opensolaris.org/jive/thread....9059&tstart=45

I was able to fix this by adding the command "kinit -k" to /etc/profile, forcing the creation of a kerberos cache file for any user accessing the system.