05-16-2013
Kerberos Ticket expiry warning message
Hi, was wondering if its possible to change the default warning message text that notifies users that their kerberos ticket is due to expire in xx minutes. I am using Kerberos 5 on Sol 10.
Can't find anything in man pages, so hoping its maybe an undocumented feature. I'd like to make the message more easily understood by users, and maybe include ticket renewal steps.
Thanks
9 More Discussions You Might Find Interesting
1. Filesystems, Disks and Memory
I have had trouble with my PC, due to construction failure I from my dealer or a power-blast over the net I had a broken MotherBoard, CPU and Memory, So I had to get new ones.
Now I'm having a 2000Mhz CPU an ASUS P4S... {I think it's P4S500} and new DDR- memory My PC gives a warning-message... (3 Replies)
Discussion started by: Silver
3 Replies
2. UNIX for Dummies Questions & Answers
On running ‘Disk Devices’ tools under ‘Disks and File Systems’ option of System Administration Manager (SAM) in our UNIX Server (HP 9000 running HPUX B.11.11 U) a warning message appeared. The message that appeared reads as follows
“The Logical Volume Manager shows this device file,... (3 Replies)
Discussion started by: mhbd
3 Replies
3. UNIX for Dummies Questions & Answers
I have received a warning message, does anyone know what this means?
warning: userdel processing continues
resource: /var/opt1k/sco/unix/5.0.6 Ga/etx/group-t
could not be allocated due to :
cannot securly create new file. (0 Replies)
Discussion started by: qphillips
0 Replies
4. UNIX for Dummies Questions & Answers
Hi all,
I'm trying to run this command in a script:
utenti_conn=`ssh $MYUSER@$MYTRAP01IP sudo cat /opt/accenture/trapwriter/data/TMDVOD\-1\-\`date \+\%Y\%m\%d\`\* /opt/accenture/trapwriter/data/TMDBTV\-1\-\`date \+\%Y\%m\%d\`\*|awk -F'|' '{print $7}'|sort |uniq|wc -l`
and in output I... (1 Reply)
Discussion started by: idro
1 Replies
5. Shell Programming and Scripting
Hello,
I am teaching myself shell scripting and I was wondering if there was a way to rename a file and display a warning or prompt message? And if you had a file like
/home/me/blah/ for example, what are the ways to use the CD to get to /me?
Would it be ../home/me? Are there other ways to... (4 Replies)
Discussion started by: kris2010
4 Replies
6. BSD
Hi,
in the log file there is line when the ticket is issued but when an user destroys the ticket there is no record.
Does someone have an idea? (0 Replies)
Discussion started by: gaspar
0 Replies
7. Linux
This is more of an annoyance than an actual production issue. I've set it up so that each user's home directory is mounted to an immediate subdirectory of $HOME when they login, (and umounts when they log out to keep /proc/mounts a manageable size).
My issue comes in when my login scripts... (0 Replies)
Discussion started by: thmnetwork
0 Replies
8. Shell Programming and Scripting
I am connecting to sql databases through shell script. Databases that i am connecting will need password change every 60 days. This is according to our security policy and cannot be changed. But this is creating problem when connecting to Databases through shell script . To connect to oracle DB we... (2 Replies)
Discussion started by: pallvi_mahajan
2 Replies
9. UNIX for Dummies Questions & Answers
Hello All,
I have below piece of code executing via shell script but for some reason even if the flag is set to KERBEROS_FLAG="N" It displays an message at the end of script execution. It should not call /usr/bin/kdestroy but looks like it is happening and this happens only for one application id... (4 Replies)
Discussion started by: Ariean
4 Replies
LEARN ABOUT OPENDARWIN
warn.conf
warn.conf(4) File Formats warn.conf(4)
NAME
warn.conf - Kerberos warning configuration file
SYNOPSIS
/etc/krb5/warn.conf
DESCRIPTION
The warn.conf file contains configuration information specifying how users will be warned by the ktkt_warnd daemon about ticket expiration
on a Kerberos client. Credential expiration warnings are sent, by means of syslog, to auth.notice. All other warning messages are sent to
daemon.notice.
Each Kerberos client host must have a warn.conf file in order for users on that host to get Kerberos warnings from the client. Entries in
the warn.conf file must have the following format:
principal syslog | terminal | mail time [email_address]
principal Specifies the principal name to be warned. The asterisk (*) wildcard can be used to specify groups of principals.
syslog Sends the warnings to the system's syslog. Depending on the /etc/syslog.conf file, syslog entries are written to the
/var/adm/messages file and/or displayed on the terminal.
terminal Sends the warnings to display on the terminal.
mail Sends the warnings as email to the address specified by email_address.
time Specifies how much time before the TGT expires when a warning should be sent. The default time value is seconds, but you
can specify h (hours) and m (minutes) after the number to specify other time values.
email_address Specifies the email address at which to send the warnings. This field must be specified only with the mail field.
EXAMPLES
Example 1: Specifying warnings
The following warn.conf entry
* syslog 5m
specifies that warnings will be sent to the syslog five minutes before the expiration of the TGT for all principals. The form of the mes-
sage is:
jdb@ACME.COM: your kerberos credentials expire in 5 minutes
FILES
/usr/lib/krb5/ktkt_warnd Kerberos warning daemon
SEE ALSO
ktkt_warnd(1M), syslog.conf(4), SEAM(5)
SunOS 5.10 22 Apr 2003 warn.conf(4)