URL:
https://github.com/SSSD/sssd/pull/5787
Author: sumit-bose
Title: #5787: krb5: fix ccache ownership for offline Smartcard authentication
Action: opened
PR body:
"""
During Smartcard authentication/PKINIT the krb5_child process is running
as privileged user for some time to make sure pcscd allows access to the
Smartcard. If SSSD is offline those privileges are currently not dropped
before creating an empty ccache and as a result file based ccaches might
have a wrong ownership. With the patch the privileges are dropped is
SSSD is offline and the ccache is created with the expected ownership.
Resolves:
https://github.com/SSSD/sssd/issues/5785
:fixes: ccache files are created with the right ownership during offline
Smartcard authentication
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/5787/head:pr5787
git checkout pr5787