--- Comment #11 from Pavel Březina <pbrezina(a)redhat.com> ---
I've tested upgrade path too, quite extensively so I'm curious how we missed
this. Anyway it looks like ccdb_secdb_get_default_send() does not validate the
iobuffer through sec_kv_to_ccache_binary() so it does not purge the cache.
It should be enough to delete /var/lib/sss/secrets/secrets.ldb and run kinit
but if you don't mind, please create a copy of it and keep it for testing fix
for this bug.
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.