Centrify DirectControl, Centrify Identity Service, Mac Edition, Centrify DirectAudit
KB-0826: Why is /tmp filled with krb5cc_cdc* files?
Applies to: Centrify DirectControl 4.0 and above on all platforms
Question: Why is /tmp filled with krb5cc_cdc* files? Why am I not able to run anymore commands since /tmp is full?
Answer: If krb5.cache.clean is set to off in centrifydc.conf and the machine has been up and running for a long time then there will be many krb5cc_cdc* files from all the users login in and out of the system.
To avoid /tmp from getting filled with krb5cc_cdc* you can set krb5.cache.clean: to cdc or all. Please use adreload after you have made the change to centrifydc.conf file.
Note: This is the expected behavior since adclient deletes the file every 5 minutes, but unable to remove if the user is logged in since it doesn't know which one is being used.
This setting will not delete the existing files but will help from cleaning up the future file creation correctly. So please delete the existing files manually and then monitor for future file creations.