DCE for the HP e3000 (B3821-90003)

38 Chapter4

DCE 1.2.1 Features and Programming Notes

Removing DCE Credentials

A user’s DCE credentials (stored in the directory

/opt/dcelocal/var/security/creds) are not automatically removed

by exiting a shell or logging out. Unless any background processes

require DCE credentials, the credentials can be removed before logging

out by running kdestroy utility. This will make the system more

secure by decreasing the opportunity for someone to maliciously gain

access to your network credentials.

The kdestroy command has been modiﬁed to allow destruction of

credentials older than a speciﬁed number of hours. kdestroy -e

exp-period my be run manually to purge older credential ﬁles.