Thanks Justin, Looks like this is the solution. I think we have to add an environment variable though to our system before it will work. Contacting IBM to see how to set that up properly (cause I don't want to break anything with Kerberos!)
-----Original Message-----
From: Justin Taylor [mailto:JUSTIN@xxxxxxxxxxxxx]
Sent: Thursday, September 04, 2014 1:59 PM
To: Midrange Systems Technical Discussion
Subject: RE: KRBCRED files
Your issue sounded vaguely familiar to me. I looked back thru my notes and 2.5 years ago, I added the following command to our daily backup:
DLTKRBCCF CCF(*EXPIRED) EXPTIME(1440)
I can't remember clearly, but I think that was to address the issue you're seeing. I checked that directory on my system, and I've got no files older than today.
HTH
-----Original Message-----
From: Matt Olson [mailto:Matt.Olson@xxxxxxxx]
Sent: Thursday, September 04, 2014 1:44 PM
To: Midrange Systems Technical Discussion
Subject: RE: KRBCRED files
That is probably what it is. I'm opening case with IBM to see what process is suppose to be cleaning those up and to verify permissions...
-----Original Message-----
From: Bradley Stone [mailto:bvstone@xxxxxxxxx]
Sent: Thursday, September 04, 2014 1:38 PM
To: Midrange Systems Technical Discussion
Subject: Re: KRBCRED files
I agree he should call IBM.
But it certainly could be authority (or attribute). I've seen it with other processes where the user running the process/job simply doesn't have proper authority to the file or directory it's in to remove it.
Sort of like temp MIME files piling up in a directory because the user sending the email didn't have authority to the directory to remove the files. (ie, user BOBSMITH creates the file, and an SMTP job running under QTCP tries to remove it after the email is sent).
IBM themselves had that happen back in V5R3 with the /tmp directory.
Brad
www.bvstools.com
On Thu, Sep 4, 2014 at 1:14 PM, Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>
wrote:
I think Matt should call IBM support - these are put there by the
Kerberos support (Network Authentication Service), I'd think, and that
is a system thing - should have no issues with authority.
But only IBM really knows.
:)
Vern
On 9/4/2014 12:29 PM, Bradley Stone wrote:
Most likely an authority issue to the IFS directory and/or files
themselves. Whatever application is creating them probably doesn't
have the authority to remove them.
Brad
www.bvstools.com
On Thu, Sep 4, 2014 at 10:01 AM, Matt Olson <Matt.Olson@xxxxxxxx> wrote:
Anyone know what the Kerberos krbcred_xxxx files are for in the
/QIBM/UserData/OS400/NetworkAuthentication/creds/ folder are for on
the IBM i?
We have thousands of files in here dating back to 2006 and I'm
wondering why they are sticking around.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please
take a moment to review the archives at
http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
http://archive.midrange.com/midrange-l.
midrange.com
