Don't drop the mailing list, please.
On ke, 04 huhti 2018, Michael Rainey (Contractor, Code 7320) wrote:
I'm talking about Kerberos. Logging into the system is not an
How do I obtain a Ticket Granting Ticket (TGT) without having to
execute "kinit" and enter a password.
Once I log into my workstation, via console or graphical environment,
I should have my kerberos credentials created or renewed and ready to
use on my network. As it works currently, I log into my system, I
open a terminal, run kinit and enter a password. Is it possible to
configure my system to obtain my kerberos credentials without needing
a password once I am successfully logged into my workstation?
This doesn't help
Unless you changed SSSD configuration, a default one on IPA clients
should populate your credentials cache.
That's why I'm asking for more details because without them it is
literally not possible to provide you any guidance.
A generic SSSD troubleshooting can be found here:
On 04/04/2018 11:20 AM, Alexander Bokovoy via FreeIPA-users wrote:
>On ke, 04 huhti 2018, Michael Rainey (Contractor, Code 7320) via
>>My organization is working to remove the need for passwords for
>>its end-users. While moving forward on this project I have
>>noticed after logging into a system the user is never given a TGT
>>after login. A TGT can be obtained by using kinit and entering a
>>password, but this defeats the purpose eliminating the use of
>>passwords. Is there some guidance I can follow to configure
>>freeIPA to obtain a TGT at login. So farmy searches have come up
>>Is this type of configuration handled by SSSD or do I need to
>>Any guidance is greatly appreciated.
>What type of a login do you talk about? SSH access, console login, using
>graphical environment, etc?
>Login without password is possible to achieve multiple ways. Which one
>is in use here?
>A bit more details on what is the workflow in use would help.
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland