On Tue, 2016-12-13 at 13:23 +0100, Dan HorĂ¡k wrote:
> krb5-auth-dialog directly uses krb5 API, not GSSAPI, so your
only
> choice with it is to use 'kswitch' utility to explicitly switch
> credential cache prior to use of the krb5-auth-dialog.
thanks for the explanation
This looks a lot like something gnome-online-accounts should just do,
though. If you open up GOA you can see it already knows whether or not
a Kerberos account needs re-auth; surely it wouldn't be hard to just
have it optionally pop up a notification when the TGT expires and let
you click it to re-auth?
--
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net
http://www.happyassassin.net