-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 09/25/2013 08:40 AM, Michael Gliwinski wrote:
Hi all,
Currently SSSD (when configured with krb5_renew_interval, etc.)
will only renew tickets it itself created. Is it possible to
somehow tell it to also look after some other ccaches?
The use case I have is for sessions started e.g. via sudo -u +
manual kinit or SSH PKI or SSH GSS-API (i.e. passwordless logins).
Those are sometimes long- running, but the tickets won't be renewed
automatically currently.
If not currently possible, I was thinking of creating some simple
program that would call SSSD functions to "register" a specified
ccache path (krb5_save_ccname + add_tgt_to_renew_table?). Do you
see any problems with this approach? Would those functions be
somehow accessible from Python API?
The SSSD team has been considering handling this for some time. The
tickets tracking it are:
https://fedorahosted.org/sssd/ticket/1497 (targeted for 1.13)
and
https://fedorahosted.org/sssd/ticket/1723 (currently deferred)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
Comment: Using GnuPG with Thunderbird -
http://www.enigmail.net/
iEYEARECAAYFAlJC6BkACgkQeiVVYja6o6PmkgCfZOmpQxu5nJCyBDCA9byKQ9AJ
WuMAnjvbsERLps3zJyzg7UGL8kiG675a
=AtmX
-----END PGP SIGNATURE-----