Forum Discussion

TLL_91858's avatar
TLL_91858
Icon for Cirrus rankCirrus
Oct 03, 2012

Timeout error using KPT after period of inactivity

I am running KPT on my 8900s, but am running into an occassional error. Users will after a period of inactivity, get a blank screen and need to close all browsers and restart to get back in to the kerberos protected site. In the secure log file I see "pam_krbdelegate(mod_auth_kerb): krb5_cc_get_principal() failed (No credentials cache found)".

 

I can not find where this cache is , or what timeout this moght be falling under. Can anyone help me?

 

Tom

 

config
design
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Oct 03, 2012
    I assume this is for ACA krbdelegate? If so, what do you have set for the idle timeout in your Kerberos Delegation profile?
  • TLL_91858's avatar
    TLL_91858
    Icon for Cirrus rankCirrus
    Oct 05, 2012
    Thank you for responding, and yes, is ACA krbdelegate. The timeout on the prfile is set to the default value of 300 seconds.

     

     

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Oct 05, 2012
    I believe the Kerberos credential cache is in a tmpfs filesystem (in-memory). Would you say the period of inactivity is greater than 5 minutes? Can you increase the timeout in the Kerberos profile?
  • TLL_91858's avatar
    TLL_91858
    Icon for Cirrus rankCirrus
    Oct 05, 2012
    It seems to be. I have worked with several users who have reported this behaviour, but have been unable to nail down an exact timeout period. I have tried myself to leave the session idle, and I've had it not time out for over an hour, yet some users have reported it was only 30 minutes or so.

     

     

    I can increase the timeout if that is the issue, just not sure if that is my problem yet, or some other timeout.