[Bug 187485] Doesn't seem to renew TGT after it has expired
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=187485
--- Comment #26 from Bojan Smojver <bojan(a)rexursive.com> 2009-06-24 02:49:43 EDT ---
Interesting text in this document:
http://www.freeipa.org/page/Automatic_Ticket_Renewal
-------------------------
Another factor to keep in mind is that in normal circumstances the user can
obtain a completely new ticket simply performing an authentication. A common
method to force a new authentication is to lock the machine and provide the
user password to the screensaver. This will generate a new PAM authentication
which will allow us to obtain a completely new TGT extending renewal time to 14
days from that point on.
-------------------------
Except that the screensaver doesn't do that :-(
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
14 years, 11 months
[Bug 173705] ttmkfdir refers to /usr/X11R6/lib/X11/fonts/encodings/encodings.dir
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=173705
--- Comment #12 from Michal Jaegermann <michal(a)harddata.com> 2009-06-24 02:16:07 EDT ---
> ping?
I am now away so I cannot check that more thoroughly but with I have an access
to ttmkfdir-3.0.9-27.fc10 and a '--help' text for this says 'default is
"/usr/X11R6/lib/X11/fonts/encodings/encodings.dir" or
"/usr/share/X11/fonts/encodings/encodings.dir"' and both these file location
strings can be found inside of ttmkfdir binaries. So presumably both
possibilities are taken into account and that would mean that this bug was
fixed in the meantime.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
14 years, 11 months
[Bug 239414] illogical mapping for non-QWERTY keyboard with scim-m17n
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=239414
Jens Petersen <petersen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |fedora-i18n-bugs(a)redhat.com
| |, phuang(a)redhat.com
Component|scim-m17n |ibus
Version|9 |rawhide
AssignedTo|pnemade(a)redhat.com |phuang(a)redhat.com
--- Comment #7 from Jens Petersen <petersen(a)redhat.com> 2009-06-24 01:48:33 EDT ---
There is some work in progress on ibus that may improve the interaction of xkb
and IM.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
14 years, 11 months
[Bug 187485] Doesn't seem to renew TGT after it has expired
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=187485
--- Comment #25 from Bojan Smojver <bojan(a)rexursive.com> 2009-06-24 00:12:12 EDT ---
I tried this patch with gnome-screensaver:
-----------------------------
--- a/src/gs-auth-pam.c
+++ b/src/gs-auth-pam.c
@@ -545,15 +545,11 @@ gs_auth_thread_func (int auth_operation_fd)
}
/* Each time we successfully authenticate, refresh credentials,
- for Kerberos/AFS/DCE/etc. If this fails, just ignore that
- failure and blunder along; it shouldn't matter.
-
- Note: this used to be PAM_REFRESH_CRED instead of
- PAM_REINITIALIZE_CRED, but Jason Heiss <jheiss(a)ee.washington.edu>
- says that the Linux PAM library ignores that one, and only
refreshes
- credentials when using PAM_REINITIALIZE_CRED.
+ for Kerberos/AFS/DCE/etc. Use PAM_ESTABLISH_CRED to get new
+ ticket.
*/
- status2 = pam_setcred (pam_handle, PAM_REINITIALIZE_CRED);
+ status2 = pam_setcred (pam_handle, PAM_DELETE_CRED);
+ status2 = pam_setcred (pam_handle, PAM_ESTABLISH_CRED);
if (gs_auth_get_verbose ()) {
g_message (" pam_setcred (...) ==> %d (%s)",
status2,
-----------------------------
However, this creates _another_ ticket - doesn't replace the existing one. In
any event, PAM_REINITIALIZE_CRED doesn't appear to do anything to the ticket at
all. Hmm, weird...
I even tried setting KRB5CCNAME before running gnome-screensaver, but that
didn't do anything either. Probably because the environment passed to the
libexec program in question didn't pass it along or something.
Anyhow, I'll stop now - somebody actually familiar with this code should have a
look.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
14 years, 11 months