IBM's kinit is being used to generate kerberos ticket. This command generates a ticket for a limited time period and subsequently it needs to be renewed.
We are invoking the command thru a scheduler to renew the ticket. Return code from this command is "0", both in failure and success!
Code: Select all
$ /opt/IBM/InformationServer/jdk/jre/bin/java -version
java version "1.7.0"
Java(TM) SE Runtime Environment (build pxa6470_27sr4fp5-20170421_02(SR4 FP5))
IBM J9 VM (build 2.7, JRE 1.7.0 Linux amd64-64 Compressed References 20170406_343211 (JIT enabled, AOT enabled)
J9VM - R27_Java727_SR4_20170406_2107_B343211
JIT - tr.r13.java_20170406_343211
GC - R27_Java727_SR4_20170406_2107_B343211_CMPRSS
J9CL - 20170406_343211)
JCL - 20170420_01 based on Oracle jdk7u141-b11
$ /opt/IBM/InformationServer/jdk/jre/bin/kinit -k -t /opt/IBM/InformationServer/Server/DSEngine/XXXXX.keytab XXXXX@DOMAINNM.COM -c FILE:/tmp/krb5cc_203
com.ibm.security.krb5.KrbException, status code: 25
message: Additional pre-authentication required
$ echo $?
0
$ /opt/IBM/InformationServer/jdk/jre/bin/kinit -fail uyhyuy
com.ibm.security.krb5.KrbException, status code: 6
message: Client not found in Kerberos database
$ echo $?
0
Can you please share your thoughts/suggestions.