Hi,

We had a mechanism to allow users to mount their directory by using a user systemd service that runs mount (with sudo).

Since we use kerberos on that operation, we’d add

Defaults env_keep += «KRB5CCNAME"

To a sudoers.d file. 

This worked pretty well, but then we moved to KCM: instead of FILE:.

Is there a way we can preserve access to KCM tickets for a user when he uses sudo? 

Best,
Francis