pam.auth.create.krb5.cache

This configuration parameter specifies whether PAM creates the Kerberos user credential cache. A value of true specifies that the Kerberos user credential cache is created. A value of false specifies that the Kerberos user credential cache is not created. The default value is true. For example:

pam.auth.create.krb5.cache: true

• When this parameter is set to false, the Kerberos user credential cache is not created, and any attempt to perform an SSO operation will fail.

• The Kerberos user credential cache can be file-based or it can be a KCM in-memory cache, depending on the krb5.cache.type setting (seekrb5.cache.type.

• This parameter is also controlled by group policy.