Disable Kerberos TGT Expiration Warning

Details

The Kerberos TGT warning service is used to warn users when their Kerberos tickets are

about expire or to renew those tickets before they expire. This service is not used if

Kerberos has not been configured. This service is configured to be “local only” by default.

Rationale:

This service should be disabled if it is not required.

Solution

To disable this service, run the following command:

# svcadm disable svc:/network/security/ktkt_warn

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles