On Mon, Dec 12, 2016 at 10:03 AM Stephen Gallagher
<sgallagh(a)redhat.com <mailto:sgallagh@redhat.com>> wrote:
> 2) I needed to update a certificate every 6 months, now I need
to kinit
> every day. This is regression. How to make it work without kinit
at all.
> I am using SSSD for company kerberos and I don't need to kinit
at all,
> how to make this work for Fedora?
>
If you're using GNOME, it will be possible to have it save your
TGT password in
GNOME Keyring and use GNOME Online Accounts to sign you in
automatically when
you log into your main account. However, there is currently a bug
in it:
https://bugzilla.redhat.com/show_bug.cgi?id=1401605
I'm running with the patch proposed in that ticket and it has
fixed the issue
for me, so I know it works.
Another (not recommended) option would be to put:
echo "<password>" | kinit username(a)FEDORAPROJECT.ORG
<mailto:username@FEDORAPROJECT.ORG>
Better yet, save your password in gnome-keyring:
keyring set login fedora
And retrieve it for kinit:
keyring get login fedora | kinit username(a)FEDORAPROJECT.ORG
<mailto:username@FEDORAPROJECT.ORG>
(requires python-keyring and python-SecretStorage)
Interesting tip. Thx.
Vít