topic Re: DCE command kdestroy does not remove old credential files... in Operating System - HP-UX

DCE command kdestroy does not remove old credential files...

Rui Vilao — Wed, 18 Apr 2001 12:06:48 GMT

Greetings,

I am running DCE 1.5 on HP-UX 10.20...

In order to delete abandoned DCE credential files I have the following entry
in crontab:
00 04 * * * /usr/bin/kdestroy -e 1d

However it seems that this command does not work very well...
The directory /opt/dcelocal/var/security/creds has more than 15000 files some
of there 17 days old...

Am I using the command correctly...
Is there some other way to remove abandoned DCE credential files without
shutting down DCE?

Thanks in advance for your help,

Kind Regards,

Rui.

Re: DCE command kdestroy does not remove old credential files...

John Bolene — Wed, 18 Apr 2001 12:12:16 GMT

My DCE is setup to have to revalidate after 26 hours.

I just remove the old files after they have been out there for a week.

Nothing automatic to remove them that I know of.

Re: DCE command kdestroy does not remove old credential files...

Alex Glennie — Wed, 18 Apr 2001 13:19:18 GMT

Are you by any chance using DCE intergrated login ? I know of some issues that may go someway to explain this if this is the case ?

Re: DCE command kdestroy does not remove old credential files...

Rui Vilao — Thu, 19 Apr 2001 08:46:25 GMT

John, Alex,

First of all thanks a lot for your contribution!

If kdestroy does not remove all the files, do you think thais command will do the job:

find /var/opt/dce/security/creds ! -atime 1 -exec rm {} \;

No, DCE integrated login is not used...

Re: DCE command kdestroy does not remove old credential files...

Alex Glennie — Thu, 19 Apr 2001 08:58:07 GMT

OK using sms at all if yes :

use

find /var/opt/dce/security/creds -user smsadm -mtime +1 | xargs rm -f

This shell command can be scheduled by cron at any interval the
system administrator would like. Every 6 hours should be more than
sufficient to prevent a build-up of obsolete credential files.

Re: DCE command kdestroy does not remove old credential files...

Rui Vilao — Thu, 19 Apr 2001 10:43:23 GMT

Hi Alex,

Do you mean I have to specify in the find command as user the owner of the credential files (user smsadm does not exist in my system...)...
A lot of different users may exist!

Cheers,

Rui.