Specify credential cache type for AD users

Specify the type of credential cache created when AD user logins.

The credential cache holds Kerberos protocol credentials (tickets, session keys, and other identifying information). Centrify DirectControl supports two types of credential cache: file-based and in-memory. Credentials stored in either type of cache can be shared between processes. A file-based credential cache persists until the file is deleted, while in-memory credential cache does not exist once Centrify-KCM service is stopped.

This group policy does not take effect on Mac OS X. File-based credential cache will always be used.

This group policy modifies the krb5.cache.type setting in the Centrify DirectControl configuration file.


Supported on:
Skip items that end with

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Kerberos
Value Name{number}
Value TypeREG_DWORD
Default Value

centrifydc_settings.admx

Administrative Templates (Computers)

Administrative Templates (Users)