Kerberos log file does not log when ticket is destroyed


 
Thread Tools Search this Thread
Operating Systems BSD Kerberos log file does not log when ticket is destroyed
# 1  
Old 11-26-2011
Kerberos log file does not log when ticket is destroyed

Hi,

in the log file there is line when the ticket is issued but when an user destroys the ticket there is no record.

Does someone have an idea?
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Red Hat

/etc/rc2.d/ check if kerberos server is enabled in the log or not

Hi, I tried to execute a command to check if Kerberos server is enabled Printer Daemon is enabled GUI Login is enabled, do advise how I check from the logs below on how to check whether the commands are valid or not? ls -all /etc/rc2.d/ total 8 drwxr-xr-x. 2 root root... (2 Replies)
Discussion started by: alvinoo
2 Replies

2. Solaris

Kerberos Ticket expiry warning message

Hi, was wondering if its possible to change the default warning message text that notifies users that their kerberos ticket is due to expire in xx minutes. I am using Kerberos 5 on Sol 10. Can't find anything in man pages, so hoping its maybe an undocumented feature. I'd like to make the... (1 Reply)
Discussion started by: melias
1 Replies

3. Shell Programming and Scripting

Check log file size every 10 minute. Alert if log not update

How to check log size every 10min. by script (can use crontab) if log size not change with alert "Log not update" Base run on SunOS 5.8 Generic_Virtual sun4u sparc SUNW,SPARC-Enterprise logFiles="log1.log log2.log" logLocation="/usr/home/test/log/" Out put. Tue Jan 31... (3 Replies)
Discussion started by: ooilinlove
3 Replies

4. Linux

cifs.upcall issue, requests new kerberos service ticket all the time

This is more of an annoyance than an actual production issue. I've set it up so that each user's home directory is mounted to an immediate subdirectory of $HOME when they login, (and umounts when they log out to keep /proc/mounts a manageable size). My issue comes in when my login scripts... (0 Replies)
Discussion started by: thmnetwork
0 Replies

5. HP-UX

Script to monitor /var/opt/resmon/log/event.log file

AM in need of some plugin/script that can monitor HP-UX file "/var/opt/resmon/log/event.log" . Have written a scrip in sh shell that is working fine for syslog.log and mail.log as having standard format, have interrogated that to Nagios and is working as I required . But same script failed to... (3 Replies)
Discussion started by: Shirishlnx
3 Replies

6. Shell Programming and Scripting

Perl's buffered I/O is causing me to miss latest log file entries in log colorizer. How to fix?

I've been finding myself using a log file colorizer written in perl to reformat and colorize the output from many different programs. Mainly, however, I use it to make the output from "tail -f" commands more readable. The base perl script I use is based on "colorlogs.pl" available from the... (1 Reply)
Discussion started by: rcsteiner
1 Replies

7. Shell Programming and Scripting

Capture all error message in Log file and send the Log file by email

Hi I have a requirement to write a script to capture all errors in a Logfile and send the file in email. If there is any error occurred the subject of email will be ERROR , If there are no error occurred the subject of email will be SUCCESS. So I created a Log file and put the Appropriate... (2 Replies)
Discussion started by: dgmm
2 Replies

8. Shell Programming and Scripting

Delete log file entries based on the Date/Timestamp within log file

If a log file is in the following format 28-Jul-10 ::: Log message 28-Jul-10 ::: Log message 29-Jul-10 ::: Log message 30-Jul-10 ::: Log message 31-Jul-10 ::: Log message 31-Jul-10 ::: Log message 1-Aug-10 ::: Log message 1-Aug-10 ::: Log message 2-Aug-10 ::: Log message 2-Aug-10 :::... (3 Replies)
Discussion started by: vikram3.r
3 Replies

9. Shell Programming and Scripting

Shell script to check lotto ticket file for winners

OK, so I've got some time on my hands due to a workplace injury, but due to a couple of broken bones and the good drugs, actually implementing something useful is proving challenging :( I am playing with generating large numbers of Pick 6 lottery ticket combos. These are stored in tab-delimited... (1 Reply)
Discussion started by: mabman
1 Replies
Login or Register to Ask a Question
kinit(1m)																 kinit(1m)

NAME
kinit - Obtains and caches ticket-granting ticket SYNOPSIS
kinit [-c cachename] [-f] [-l lifetime] [-p] [-r lifetime] [-v] [principal] OPTIONS
Specifies an alternative credentials cache, cachename, to be used in place of the default credentials cache. The kinit command overwrites the contents of the alternative cache with the current credentials. The name of the default credentials cache may vary between systems. However, if the KRB5CCNAME environment variable is set, its value is used to name the default cache. Requests the FORWARDABLE option. This option allows a ticket-granting ticket with a different network address than the present ticket-granting ticket to be issued to the principal. For forwardable tickets to be granted, the principal's account in the registry must specify that the principal can be granted forwardable tickets. Specifies the lifetime of the ticket-granting ticket in hours. If this option is not specified, the default ticket lifetime (set by each site using the rgy_edit(1m) command) is used. Requests the PROXIABLE option. This option allows a ticket with a different network address than the present ticket to be issued to the principal. For proxiable tickets to be granted, the principal's account in the registry must specify that the principal can be granted proxiable tickets. Requests the RENEWABLE option. This option allows the tickets issued to the principal to be renewed. For renewable tickets to be granted, the principal's account in the registry must specify that the principal can be granted renewable tickets. The life- time of the ticket-granting ticket is specified in hours by lifetime. Specifies that the command should run in verbose mode. ARGUMENTS
The principal argument specifies the name of the principal for whom the ticket-granting ticket should be obtained. If principal is omitted, the principal name from the existing cache is reused. DESCRIPTION
The kinit command can be used to refresh a DCE credentials cache. When you invoke kinit, it prompts for your password. The ticket lifetime and renewable lifetime are set in the following format: {num {interval}}... where: A number that specifies the number of the interval; interval can be specified by the following: w - weeks d - days h - hours m - minutes s - seconds For example, to set the lifetime to 3 weeks, 5 days, and 10 hours, the entry would be the following: 3w5d10h FILES
If the KRB5CCNAME environment variable is not set, the name of the file is in the form shown where [unix_id] is the decimal UNIX ID of the user. If the KRB5CCNAME environment variable is set, its setting determines the name of the file. NOTE
kinit provided under "/usr/bin" is part of Kerberos V5 client product. For DCE operations use "/opt/dce/bin/kinit". RELATED INFORMATION
Commands: klist(1m), kdestroy(1m). kinit(1m)