[SSSD-users] krb5_child can't create ccache with error 13 [Permission Denied]

Lukas Slebodnik lslebodn at redhat.com
Wed Aug 20 08:02:15 UTC 2014


On (20/08/14 08:23), Chris Malton wrote:
>Hi guys,
>
>I'm fairly sure I'm missing something here, but I can't see why.
>
>For some reason, I get this in the logs:
>
>(Wed Aug 20 07:51:33 2014) [[sssd[krb5_child[3650]]]]
>[sss_get_ccache_name_for_principal] (0x4000): Location:
>[FILE:/tmp/krb5cc_1332601725_XXXXXX]
>(Wed Aug 20 07:51:33 2014) [[sssd[krb5_child[3650]]]]
>[sss_get_ccache_name_for_principal] (0x2000): krb5_cc_cache_match failed:
>[-1765328243][Can't find client principal cmalton_it at KEGS.LOCAL in cache
>collection]
>(Wed Aug 20 07:51:33 2014) [[sssd[krb5_child[3650]]]] [create_ccache]
>(0x0020): 574: [13][Permission denied]
>
I guess it is ubuntu. Could it be problem with apparmor?

You can also try to use different template for krb5 ccache.
  e.g. krb5_ccname_template = KEYRING:persistent:%U

Details in man sssd-krb5
    -> krb5_ccachedir
    -> krb5_ccname_template

LS


More information about the sssd-users mailing list