One of the credential cache types offered by MIT Kerberos is MEMORY
. According to the documentation it is used by kadmin.
MEMORY caches are for storage of credentials that don’t need to be made available outside of the current process. For example, a memory ccache is used by kadmin to store the administrative ticket used to contact the admin server.
I have tried setting default_ccache_name = MEMORY:
in /etc/krb5.conf
. After doing so I made a packet capture while issuing the kinit
command. From this capture I can see that a TGT was successfully obtained from the KDC. This ticket was then (obviously) lost as soon as the kinit process finished. Furthermore, it seems if persistent memory based tickets are required one can use the KEYRING
ccache type.
What are the other use cases of the MEMORY credential cache type?
I assume this is not useful from a bash script for example. When the script calls kinit
it will fork and upon completion the obtained ticket will not be accessible to the parent.
Is there perhaps a kerberos header file that can be included so as to keep obtained tickets in the same address space as the rest of your logic?