Skip to main content
NetApp Knowledge Base

What is the maximum Kerberos token size (MaxTokenSize) that ONTAP can process?

  1. Last updated
    Mar 20, 2023
  2. Save as PDF
Views:
1,273
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:
3/20/2023, 2:26:22 PM

​ ​ ​  

Applies to

ONTAP 9

Answer

The Kerberos cryptographic authentication token allows the storage system to verify the identity and permissions of users and workstations. Group information for a particular user is stored in this token. If the user is part of a significant amount of groups, this token may exceed the 12K default set by Microsoft.

ONTAP also has limitations for this token based on the version:

  • Clustered Data ONTAP 8.2.2 and earlier - 16K
  • Clustered Data ONTAP 8.2.2 and later - 32K
  • Clustered Data ONTAP 8.3 and later - 64K
  • ONTAP 9.0 and later - 64K

Additional Information

N/A

 

 

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.