URL:
https://github.com/SSSD/sssd/pull/5450
Title: #5450: kcm: add support for kerberos tgt renewals
sumit-bose commented:
"""
> thanks for the effort. What would be your suggestion for the way
forward? We can add a configure check if the new functions are already available. But if
they are not available would you recommend to fall-back to the SSSD implementation of the
functions or to build sssd_kcm without the certificate renewal feature?
(Assuming this is a typo for "credential renewal".)
yes :-)
My preference would be to not build the functionality. If there's an older release
you need this functionality on, I can probably backport it.
The point is to allow sssd-kcm to not carry code for {de,}serializing the credentials
objects. It reduces testing burden, and it makes debugging for us easier in the event that
there are any issues.
Ok, fair point. @justin-stephenson, if you agree with this as well please let me know if
you need help with the configure/automake related changes?
bye,
Sumit
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5450#issuecomment-769729721