URL:
https://github.com/SSSD/sssd/pull/798
Title: #798: ipa: ipa_getkeytab don't call libnss_sss
abbra commented:
"""
Looks nice to me too. In this environment and execution flow we do not expect to resolve
any of non-system users because the only user we would need to care about should be the
user under which sssd itself is executed (root, in this case, or non-root system user)
which should not be stored in sssd for obvious reasons. Another data point is that a
ccache used by the ipa-getkeytab is the one set already by SSSD to a static predefined
path so there is no need to resolve any of the modifiers supported by libkrb5.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/798#issuecomment-478682250