Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-0826: Why is /tmp filled with krb5cc_cdc* files?

Authentication Service ,   Mac & PC Management Service ,  

12 April,16 at 11:02 AM

Question:

Why is /tmp filled with krb5cc_cdc* files? Why am I not able to run anymore commands since /tmp is full?


Answer:

If krb5.cache.clean is set to off in centrifydc.conf and the machine has been up and running for a long time then there will be many krb5cc_cdc* files from all the users login in and out of the system.

To avoid /tmp from getting filled with krb5cc_cdc*  you can set krb5.cache.clean: to cdc or all. Please use adreload after you have made the change to centrifydc.conf file.

Note:  This is the expected behavior since adclient deletes the file every 5 minutes, but unable to remove if the user is logged in since it doesn't know which one is being used.  

This setting will not delete the existing files but will help from cleaning up the future file creation correctly. So please delete the  existing files manually and then monitor for future file creations.

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.

Related Articles

 articleKB-2297: /tmp filled with krb5cc_cdc as a result of user not closing session properly articleKB-20210: Common Questions Regarding Centrify DirectControl and CoreOS articleKB-6041: How to show current license type in use by adclient articleKB-6073: How to join the Linux/Unix Centrify Server to Active Directory with specific Computer Role? articleKB-6040: How to change the license type in use after adclient successful joined to the AD? articleKB-6056: How to report the group policy settings that are in effect for the local computer? articleKB-6038: How to specify the license type to use when joining the server to AD using adjoin? articleKB-2433: Why does the /tmp folder fill up with cims files? articleKB-8942: What are the steps to migrate a RHEL Brightstore cluster to Centrify