diff --git a/xCAT/postscripts/joindomain b/xCAT/postscripts/joindomain
index 62588594f..74cf05af9 100644
--- a/xCAT/postscripts/joindomain
+++ b/xCAT/postscripts/joindomain
@@ -28,8 +28,8 @@ if [ "$OSVER" = "rhels6" ]; then
     echo krb5_ccname /var/run/ldap_krb5cc >> /etc/nslcd.conf
     sed -i '/# Mappings for Active Directory/,/^[^#]/ s/^#\([^ ]\)/\1/' /etc/nslcd.conf
     authconfig --update --enableldap --ldapserver=$LDAPSRV --ldapbasedn=$LDAPBASEDN
-    echo 'kinit '$HOSTPRINC'-c /var/run/ldap_krb5cc < /etc/krb5.hostpass >& /dev/null' >> /etc/rc.local
-    echo 'kinit '$HOSTPRINC'-c /var/run/ldap_krb5cc < /etc/krb5.hostpass >& /dev/null' >> /etc/cron.hourly/nslcdkrb.cron
+    echo 'kinit '$HOSTPRINC'-c /var/run/ldap_krb5cc < /etc/krb5.hostpass >& /dev/null;chown nslcd /var/run/ldap_krb5cc' >> /etc/rc.local
+    echo 'kinit '$HOSTPRINC'-c /var/run/ldap_krb5cc < /etc/krb5.hostpass >& /dev/null;chown nslcd /var/run/ldap_krb5cc' >> /etc/cron.hourly/nslcdkrb.cron
     chmod +x /etc/cron.hourly/nslcdkrb.cron
 fi
 #TODO: SLES/maybe RHEL5.  Uncomfortable with libnss_ldap without root_krb5_ccname, ldap needs diff credentials per user