Question:
How can I disable credential caching so that the authentication occurs every time a user logs in?
Answer:Credential caching can be completely disabled in /etc/centrifydc.conf file using the following flags:
adclient.hash.allow:
adclient.hash.deny:You can either create an allow list OR a deny list, but not both. To prevent everyone from caching credentials, you can use:
adclient.hash.allow: NONE
After making the changes, please run adreload and adflush and attempt login again.
Note: If Centrify is disconnected for some reason, 'cached credentials' will NOT work however root can login.