From 6050d62c96a2010c949ea2a4150e7a100c02c6d3 Mon Sep 17 00:00:00 2001
From: caubet_m <marc.caubet@psi.ch>
Date: Fri, 15 Jul 2022 13:07:49 +0200
Subject: [PATCH] kerberos update

---
 .../merlin6/02-How-To-Use-Merlin/kerberos.md  | 34 ++++++++++++++++++-
 1 file changed, 33 insertions(+), 1 deletion(-)

diff --git a/pages/merlin6/02-How-To-Use-Merlin/kerberos.md b/pages/merlin6/02-How-To-Use-Merlin/kerberos.md
index 5c622d4..4a271b8 100644
--- a/pages/merlin6/02-How-To-Use-Merlin/kerberos.md
+++ b/pages/merlin6/02-How-To-Use-Merlin/kerberos.md
@@ -120,7 +120,7 @@ export KRB5CCNAME="$(mktemp "$HOME/.k5/krb5cc_XXXXXX")"
 # Example two: Independent Kerberos5 cache
 #              ${SLURM_JOBID} will make the cache independent per job
 #              Use it only if necessary
-export KRB5CCNAME="$(mktemp "$HOME/.k5/krb5cc_${SLURM_JOBID}")"
+export KRB5CCNAME="$(mktemp "$HOME/.k5/krb5cc_XXXXXX-{SLURM_JOBID}")"
 ```
 * To obtain a Kerberos5 granting ticket, run `kinit` by using your keytab:
 ```bash
@@ -133,6 +133,8 @@ aklog
 
 ### Slurm batch script example: obtaining KRB+AFS granting tickets
 
+* Example 1 (**recommended**, shared cache file):
+
 ```bash
 #!/bin/bash
 #SBATCH --partition=hourly            # Specify 'general' or 'daily' or 'hourly'
@@ -152,4 +154,34 @@ aklog
 klist
 
 echo "Here should go my batch script code."
+``
+
+* Example 2 (independent cache file):
+ 
+```bash
+#!/bin/bash
+#SBATCH --partition=hourly            # Specify 'general' or 'daily' or 'hourly'
+#SBATCH --time=01:00:00               # Strictly recommended when using 'general' partition.
+#SBATCH --output=run.out              # Generate custom output file
+#SBATCH --error=run.err               # Generate custom error  file
+#SBATCH --nodes=1                     # Uncomment and specify #nodes to use
+#SBATCH --ntasks=1                    # Uncomment and specify #nodes to use 
+#SBATCH --cpus-per-task=1
+#SBATCH --constraint=xeon-gold-6152
+#SBATCH --hint=nomultithread
+#SBATCH --job-name=krb5
+
+export KRB5CCNAME="$(mktemp "$HOME/.k5/krb5cc_XXXXXX-${SLURM_JOBID}")"
+kinit -kt "$HOME/.k5/krb5.keytab" $USER@D.PSI.CH
+aklog
+klist
+
+echo "Here should go my batch script code."
+
+# Destroy Kerberos tickets created for this job only
+kdestroy
+klist
+
+# Remove the remaining cache file
+rm -f $KRB5CCNAME
 ```