No other users were logged in, but it must be some other issue with my sssd config ( that
hasn’t presented any obvious problems ) … i just tried it on a virtual machine with my
older config ( access_provider = ldap ) and the cache directy was changed without issue.
will investigate further.
-Chris
On Feb 6, 2015, at 12:18 PM, Sumit Bose <sbose(a)redhat.com>
wrote:
On Fri, Feb 06, 2015 at 03:50:19PM +0000, Chris Petty wrote:
>
> In the near future i need to have my krb5 caches stored in a specific directory, so i
was trying to set these defaults in sssd 1.11.6, on scientific linux 6.6 with krb5
1.10.3
>
> Regardless of what i set, i always ended up with the cache files made in /tmp, with
the default names
>
> from sssd.conf:
>
> krb5_ccachedir = /tmp/krb5cache
> krb5_ccname_template = FILE:%d/krb5cc_%U_XXXXXX
>
>
> From the log:
> (Fri Feb 6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [dp_get_options] (0x0400): Option
krb5_ccachedir has value /tmp/krb5cache
> (Fri Feb 6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [dp_get_options] (0x0400): Option
krb5_ccname_template has value FILE:%d/krb5cc_%U_XXXXXX
> (Fri Feb 6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [check_and_export_options]
(0x0100): The credential ccache name template has been explicitly set in sssd.conf, it is
recommended to set default_ccache_name in krb5.conf instead so that a system default is
used
>
> So it appears that things are set, correctly .. however when i get a ticket, its
always in the default ( /tmp ):
>
> [cmp12@dirac ~]$ klist
> Ticket cache: FILE:/tmp/krb5cc_119549_juVcIs5202
>
> I looked into setting default_ccache_name, however that option is not available until
krb5 1.11
>
> Everything else is working as expected, any suggestions on making this work?
Please make sure that there is no session open for the user trying to
log in. SSSD tries to use the same credential cache for all sessions for
a given user.
HTH
bye,
Sumit
>
> Thanks,
> -Chris
> _______________________________________________
> sssd-users mailing list
> sssd-users(a)lists.fedorahosted.org
>
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users