title: How to set the Kerberos default_ccache_name attribute on a client without using KRB5CCNAME?
body: <p>According to the MIT Kerberos documentation, the default credential cache name is determined as follows:</p>
  
  <blockquote>
    <p><strong>Default ccache name</strong></p>
    
    <p>The default credential cache name is determined by the following, in
    descending order of priority:</p>
  
  <pre><code>1. The KRB5CCNAME environment variable. For example, KRB5CCNAME=DIR:/mydir/.
  2. The default_ccache_name profile variable in [libdefaults].
  3. The hardcoded default, DEFCCNAME.
  </code></pre>
  </blockquote>
  
  <p><a href="http://web.mit.edu/kerberos/krb5-devel/doc/basic/ccache_def.html" rel="noreferrer">http://web.mit.edu/kerberos/krb5-devel/doc/basic/ccache_def.html</a></p>
  
  <p>I'm wondering if there's a way to define default_ccache_name profile variable (#2) on the client side?  I've tried defining it as follows in /etc/krb5.conf on one of my client machines:</p>
  
  <pre><code>[libdefaults]
          ...
          default_ccache_name = FILE:/var/krb5/security/creds/krb5cc_%{uid}
          ...
  </code></pre>
  
  <p>But the client binaries (klist / kinit / kdestroy etc.) seem to ignore this completely:</p>
  
  <pre><code>[~]$ klist
  klist: No credentials cache found (ticket cache FILE:/tmp/krb5cc_34125)
  </code></pre>
  
  <p>I'm running version 1.9.4:</p>
  
  <pre><code>[~]$ klist -V
  Kerberos 5 version 1.9.4
  </code></pre>