On Thu, 2012-07-05 at 10:47 +0200, Stef Walter wrote:
On 07/04/2012 06:01 PM, Stef Walter wrote:
> 1) Rewrite the way we kinit with a keytab. Use krb5_init_creds_init()
> + krb5_init_creds_set_keytab() + krb5_init_creds_get() instead of
> just krb5_get_init_creds_keytab().
Hmmm, this doesn't seem to be an option. We don't have access to the
krb5_kdc_req member of krb5_init_creds_context from outside of the krb5
library.
We discussed this on a phone call today. The decision we've made is that
we're going to address this in libkrb5 rather than SSSD. We will
backport the fix for krb5 1.11.x into the versions carried in RHEL and
Fedora and recommend that other distributions do the same.
For this to work properly, we will revert the patch that Stef originally
committed to SSSD.