This parameter specifies whether the PAM flag PAM_REFRESH_CRED is supported and can be used to trigger creation of the credential cache and renew Kerberos tickets. The default is false, in which case the PAM_ESTABLISH_CRED flag is used to trigger creation of the credential cache and renew Kerberos tickets. For example:
pam.setcred.support.refresh: false
Doc Feedback