URL:
https://github.com/SSSD/sssd/pull/876
Title: #876: KCM: Fill in pre-created ccache instead of creating a new one in
kcm_initialize
jhrozek commented:
"""
btw this PR fixes the most glaring issue but maybe the whole problem needs more work. What
this doesn't take into account is that if there is already an existing cache for a
principal, but then openssh fills in the new one. In this case, the old one stays in the
cache.
Currently we always switch to the new one. We should also take into account the cases
described by the reporter in
https://pagure.io/SSSD/sssd/issue/4017 -- e.g. if there is
already a ccache for the principal being initialized, we might switch to the new one by
default, or only if the new one has longer-lived credentials than the old one.
At any rate, we should reap the old TGTs..but I guess this PR has some value on its own as
well.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/876#issuecomment-525734063