[Lustre-discuss] Lustre kerberos credentials not looking at $KRB5CCNAME

[Josephine Palencia]

Lustre kerberos does not look at $KRB5CCNAME.  It assumes that your kerberos ccache is
/etc/krb5cc_N.    This problem affects system which uses kerberos toauthenticate logins.
The system complains with a log error saying that it cannot find a ccache  and the user
cannot accessthe lustre filsystem (permission denied with df or any 
attempts for IO).

Workarounds:
    -manually run "unset KRB5CCNAME" then "kinit"
    -or parse $KRB5CCNAME from FILE:/tmp/XYZ and run "cp /tmp/XYZ /tmp/krb5cc_N" in login scripts

The ideal solution is for lustre kerberos to have something similar to "afslog" which will
look at $KRB5CCNAME and put lustre credentials somewhere where the system can find them.

Kudos to Kevin Sullivan (PSC) for helping to identify the problem and providing the work-around.

This has been filed in bugzilla.lustre under #20253


-josephine