Dne 12.12.2016 v 20:54 Christopher napsal(a):
On Mon, Dec 12, 2016 at 10:03 AM Stephen Gallagher <sgallagh@redhat.com> wrote:

> 2) I needed to update a certificate every 6 months, now I need to kinit
> every day. This is regression. How to make it work without kinit at all.
> I am using SSSD for company kerberos and I don't need to kinit at all,
> how to make this work for Fedora?
>

If you're using GNOME, it will be possible to have it save your TGT password in
GNOME Keyring and use GNOME Online Accounts to sign you in automatically when
you log into your main account. However, there is currently a bug in it:
https://bugzilla.redhat.com/show_bug.cgi?id=1401605

I'm running with the patch proposed in that ticket and it has fixed the issue
for me, so I know it works.


Another (not recommended) option would be to put:

echo "<password>" | kinit username@FEDORAPROJECT.ORG


Better yet, save your password in gnome-keyring:
keyring set login fedora
And retrieve it for kinit:
keyring get login fedora | kinit username@FEDORAPROJECT.ORG

(requires python-keyring and python-SecretStorage) 


Interesting tip. Thx.


Vít