GSSCred.8   [plain text]


.Dd May 1, 2020
.Dt GSSCred 8
.Os
.Sh NAME
.Nm GSSCred
.Nd manages GSS-API credentials
.Sh DESCRIPTION
.Nm
manages the lifecycle of GSS-API credentials.
.Sh Other options on Mac OS X
.Bl -tag -width "XXX"
.It user-uid-matching
The default behavior of
.Nm
on macOS is to use the audit session id to allow access to credentials.  This enables credentials to be shared with sudo sessions.  To enable the same uid to access them from other audit sessions, run this defaults command:
.Pp
.Dl sudo defaults write /Library/Preferences/com.apple.Heimdal.GSSCred use-uid-matching -bool true
.El
.Bl -tag -width "XXX"
.It renew-interval
The default interval in seconds to renew credentials is 2 hours. To change it set the default: 
.Pp
.Dl sudo defaults write /Library/Preferences/com.apple.Heimdal.GSSCred renew-interval -int 7200
.El

.Sh SEE ALSO
.Xr kdestroy 1 ,
.Xr kinit 1 ,
.Xr klist 1