Kinit: Unknown credential cache type while getting default ccache

Rocky Linux Tech Help
1

Good day,

I just completed a migration of our company to FreeIPA and I found some users get an error stating the following: kinit: Unknown credential cache type while getting default ccache

I found a fix for it on Stackoverflow Kerberos kinit: Unknown credential cache type while getting default ccache - Stack Overflow and this works.

I just wanted to confirm what the implications of commenting out the default_ccache_name attribute may have.

If anyone knows if this is a good solution, please let me know.

Best regards,
Greg

2

In what scenarios is this happening? On what systems? What distribution/version? Are these systems fully up to date? In normal circumstances with current Rocky Linux 8 and 9 versions, this message shouldn’t appear.

3

This literally only happens from MacOS systems that connect to Ubuntu 22.04 systems connected to FreeIPA. The MacOS systems are not domain joined only the Ubuntu systems are. The MacOS systems are Sonoma and Sequoia.

4

Commenting default_ccache_name in /etc/krb5.conf (and possibly also in files in /etc/krb5.conf.d) means that the default value will be used, in RHEL you would end up with a FILE:/tmp/krb5cc_%{uid} cache. Running “klist” should show what the cache type is, “Ticket cache: …”.

So unless you have an issue with using a FILE cache it should work fine.

5

That’s the behaviour I noticed. The default type was keyring instead of file and simply commenting keyring out didn’t seem to change the functionality. Thank you for the feedback!