[SSSD] krb5 ticket renewal via gnome-screensaver not working

Sumit Bose sbose at redhat.com
Mon Nov 9 14:47:28 UTC 2009


On Mon, Nov 09, 2009 at 09:29:44AM -0500, Brian J. Murrell wrote:
> On Mon, 2009-11-09 at 15:13 +0100, Sumit Bose wrote: 
> > 
> > This error indicates a short write.
> 
> Ahhh.  Now that is meaningful to me.  :-)
> 
> > Can you check if a ccache file is
> > create at all and if yes check the content with klist?
> 
> I didn't realize it was the ccache it was complaining about and I
> thought it was sssd's internal caching (i.e. for disconnected use) that
> it was complaining about.
> 
> It turns out that / (where /tmp lives) is full -- filled up with a
> stupid $&@# "flash" file, and PDFs even.  Why is this crap being created
> in /?  This is all ~/tmp/ fodder.  Hrm.  Now that I think of it, I
> wonder if I really want /var/tmp for my krb5_ccachedir.
> 
> Anyway, creating some space in /tmp resolved the caching failure.
> 
> I also notice that I have:
> 
> krb5_ccname_template = FILE:%d/krb5cc_%U_XXXXXX
> 
> Which I got from the example template.  Do I really want a unique ccache
> for each logged instance of a single user?
> 
> So, back to testing gnome-screensaver and ccache refreshing... In my
> efforts to clean up /tmp, I simply removed all of the krb5cc files for
> the desktop user, so no ccache files at all.  I then unlocked the
> screensaver and there was no new ccache file created.  A klist from that
> desktop user yields:
> 
> klist: No credentials cache found (ticket cache FILE:/tmp/krb5cc_1001_mk7UxQ)
> 
> Surely, if gnome-screensaver's calling of pam_sssd were refreshing the
> ccache, in this case it would have re-created it, yes?
> 
> b.
> 

yes, can you send the log files for the gnome-screensaver case ?

Thanks.

bye,
Sumit



More information about the sssd-devel mailing list