Am Thu, Apr 07, 2022 at 01:34:27PM -0000 schrieb Francis Augusto Medeiros-Logeay:
Hi,
Having some RHEL 8 machines as vdi on a VMware Horizon desktop pool,
we see that when reconnecting to a machine, system-auth and its
pam-stack is executed (at least I think so).
Is there a way to make pam_sss actually fetch a new TGT when doing so,
just like entering a password when the screensaver does?
Hi,
iirc there is a special VMware PAM module which let user pass without
entering the password if they are already authenticated at the VMware
infrastructure. So I would expect that pam_sss is not called at all.
Additionally, pam_sss would always need a password to get a TGT with the
help of the SSSD backend.
bye,
Sumit
Best,
Francis
_______________________________________________
sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste...
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure