43.4.6.1. Removing the Timestamp File

Before abandoning a console where a PAM timestamp is active, it is recommended that the timestamp file be destroyed. To do this from a graphical environment, click the authentication icon on the panel. This causes a dialog box to appear. Click the Forget Authorization button to destroy the active timestamp file.

Illustration of the authentication dismissal dialog box.

Figure 43.8. Dismiss Authentication Dialog

You should be aware of the following with respect to the PAM timestamp file:

If logged in to the system remotely using ssh, use the /sbin/pam_timestamp_check -k root command to destroy the timestamp file.
You need to run the /sbin/pam_timestamp_check -k root command from the same terminal window from which you launched the privileged application.
You must be logged in as the user who originally invoked the pam_timestamp.so module in order to use the /sbin/pam_timestamp_check -k command. Do not log in as root to use this command.
If you want to kill the credentials on the desktop (without using the Forget Authorization action on the icon), use the following command:
```
/sbin/pam_timestamp_check -k root </dev/null >/dev/null 2>/dev/null
```
Failure to use this command will only remove the credentials (if any) from the pty where you run the command.

Refer to the pam_timestamp_check man page for more information about destroying the timestamp file using pam_timestamp_check.