URL:
https://github.com/SSSD/sssd/pull/197
Title: #197: KCM responder
jhrozek commented:
"""
I made two fixes related to documentation and packaging. They are already squashed, but to
ease the review, the documentation fix was:
```
diff --git a/src/man/sssd-kcm.8.xml b/src/man/sssd-kcm.8.xml
index b28b3bf..5dc9383 100644
--- a/src/man/sssd-kcm.8.xml
+++ b/src/man/sssd-kcm.8.xml
@@ -119,6 +119,24 @@ systemctl enable sssd-kcm.service
</para>
</refsect1>
+ <refsect1 id='storage'>
+ <title>THE CREDENTIAL CACHE STORAGE</title>
+ <para>
+ The credential caches are stored in the SSSD secrets service (see
+ <citerefentry>
+
<refentrytitle>sssd-secrets</refentrytitle><manvolnum>5</manvolnum>
+ </citerefentry>
+ for more details). Therefore it is important that also the sssd-secrets
+ service is enabled and its socket is started:
+ <programlisting>
+systemctl start sssd-secrets.socket
+systemctl enable sssd-secrets.socket
+systemctl enable sssd-secrets.service
+ </programlisting>
+ Your distribution should already set the dependencies between the services.
+ </para>
+ </refsect1>
+
<refsect1 id='options'>
<title>CONFIGURATION OPTIONS</title>
<para>
```
And the packaging fix was about pointing to the right socket -- I didn't notice the
wrong socket name because I had the configuration on the sssd side overriden in the same
manner:
```
index 45d4853..ac88fca 100644
--- a/contrib/kcm_default_ccache
+++ b/contrib/kcm_default_ccache
@@ -2,8 +2,11 @@
# directory that is included from the Kerberos configuration file (/etc/krb5.conf)
# On Fedora/RHEL/CentOS, this is /etc/krb5.conf.d/
#
-# To enable the KCM credential cache, uncomment the two following lines and enable the
KCM socket:
+# To enable the KCM credential cache, uncomment the following lines and
+# enable the KCM socket and the service:
# systemctl enable sssd-kcm.socket
+# systemctl start sssd-kcm.socket
+# systemctl enable sssd-kcm.service
#[libdefaults]
# default_ccache_name = KCM:
diff --git a/src/sysv/systemd/sssd-kcm.socket.in b/src/sysv/systemd/sssd-kcm.socket.in
index b115b9a..80ec1c0 100644
--- a/src/sysv/systemd/sssd-kcm.socket.in
+++ b/src/sysv/systemd/sssd-kcm.socket.in
@@ -1,9 +1,10 @@
[Unit]
Description=SSSD Secrets Service responder socket
-Documentation=man:sssd-kcm(5)
+Documentation=man:sssd-kcm(8)
+Requires=sssd-secrets.socket
[Socket]
-ListenStream=@localstatedir(a)/run/kcm.socket
+ListenStream=@localstatedir(a)/run/.heim_org.h5l.kcm-socket
[Install]
WantedBy=sockets.target
```
"""
See the full comment at
https://github.com/SSSD/sssd/pull/197#issuecomment-288329922