GSSCred(8) System Manager's Manual GSSCred(8)

GSSCredmanages GSS-API credentials

GSSCred manages the lifecycle of GSS-API credentials.

use-uid-matching
The default behavior of GSSCred on macOS is to use the audit session id to allow access to credentials. This enables credentials to be shared with sudo sessions. To enable the same uid to access them from other audit sessions, run this defaults command:

sudo defaults write /Library/Preferences/com.apple.Heimdal.GSSCred use-uid-matching -bool true
renew-interval
The default interval in seconds to renew credentials is 2 hours. To change it set the default:

sudo defaults write /Library/Preferences/com.apple.Heimdal.GSSCred renew-interval -int 7200

kdestroy(1), kinit(1), klist(1)

May 1, 2020 Mac OS X 12