Allow PAM to Create User Kerberos Credential Cache

Use this policy to specify whether PAM creates the Kerberos user credential cache.

If this group policy is Enabled or Not Configured, a Kerberos user credential cache is created. The Kerberos user credential cache can be file-based or it can be a KCM in-memory cache, depending on the krb5.cache.type setting in /etc/centrifydc/centrifydc.conf.

If this group policy is disabled, the Kerberos user credential cache is not created, and any attempt to perform an SSO operation will fail.

This group policy modifies the pam.auth.create.krb5.cache setting in the agent configuration file.