pam.auth.create.krb5.cache

This configuration parameter specifies whether PAM creates the Kerberos user credential cache. A value of true specifies that the Kerberos user credential cache is created. A value of false specifies that the Kerberos user credential cache is not created. The default value is true. For example:

pam.auth.create.krb5.cache: true

Note:    

  • When this parameter is set to false, the Kerberos user credential cache is not created, and any attempt to perform an SSO operation will fail.
  • The Kerberos user credential cache can be file-based or it can be a KCM in-memory cache, depending on the krb5.cache.type setting (see krb5.cache.type).
  • This parameter is also controlled by group policy.