Question:

How can the Kerberos cache be renewed manually?


Answer:

Centrify DirectControl maintains a Kerberos ticket cache automatically. This ticket cache allows the use of any standard Kerberized applications (such as MIT's Kerberized telnet and SAMBA's smbclient). 

The TGT can be automatically renewed periodically up to a maximum period allowed. If this limit is reached and the TGT cannot be renewed, then the credentials will expire and a new TGT can only be obtained by logging out and logging back in, or by typing:

  /usr/share/centrifydc/kerberos/bin/kinit username

(Where username is the AD user's username.)