Kerberos ticket caching

If your Kerberos environment uses ticket caching, be sure to cache tickets in /nz/data/config on the Netezza Performance Server hosts. This way, you can access tickets after a host failover.

For configurations where single user tickets that are stored in a cache file, by default, Kerberos caches the tickets in the /tmp directory. After a host failover, you cannot access the tickets stored in /tmp on another node. It is recommended that you store tickets in the /nz/data/config/krb5cc_500 file file. You can use the KRB5CCNAME environment variable to specify the location for the tickets.

You can set the variable in the .bashrc file for the nz user account.

After you set the variable, export the variable so that Kerberos uses the new location for the ticket cache.

A sample setting follows:

 KRB5CCNAME=FILE:/nz/data/config/krb5cc_500

For configurations, where multiple user tickets are stored in a cache directory, you must set the KRB5CCNAME environment variable to /nz/data/config.

You can set the variable in the .bashrc file for the nz user account.

After you set the variable, export the variable so that Kerberos uses the new location for the ticket cache.

A sample setting follows:

 KRB5CCNAME=DIR:/nz/data/config