URL:
https://github.com/SSSD/sssd/pull/188
Author: jhrozek
Title: #188: Add the first version of the KCM responder
Action: opened
PR body:
"""
These patches add a new service for managing Kerberos credential patches. It
follows the design document here:
https://fedorahosted.org/sssd/wiki/DesignDocs/KCM
So far all the credential caches are stored in memory. However, all the
internal APIs are ready for talking to sssd-secrets and store the caches
there which is what I'm working on now.
As per testing, it should be enough to set the default ccache name to
"KCM:" and make sure the sssd-kcm socket is enabled and started and the
sssd-kcm service is enabled.
It is important to test access control. Manually, I tested two different
UNIX users, tested setting the KRB5CCNAME variable to someone else's ccache
and so on, but more testing is welcome.
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/188/head:pr188
git checkout pr188