On Mon, Dec 01, 2014 at 05:43:49PM +0100, Joschi Brauchle wrote:
Hello Everyone,
there seems to be a problem with the KRB TGT auto-renewal feature of SSSD in
version 1.12.2.
I have this config in sssd.conf:
-----------------------------
krb5_renew_interval = 60
-----------------------------
We are using the AD plugin, the KRB plugin is not installed but krb-common
(i.e. krb5_child, ldap_child, libsss_krb5_common.so).
#Everything works fine, except auto-renewal!
See the following example:
-----------------------------
$ kinit -l 10m
Password for ne96soh(a)ADS.MWN.DE:
Does the renewal work if you acquire the ticket via SSSD login instead
of kinit? Can you test logging in with some PAM service (gdm, su, ...)