[SSSD-users] SSSD krb5_ccache

Sumit Bose sbose at redhat.com
Fri Feb 6 17:18:57 UTC 2015


On Fri, Feb 06, 2015 at 03:50:19PM +0000, Chris Petty wrote:
> 
> In the near future i need to have my krb5 caches stored in a specific directory, so i was trying to set these defaults in sssd 1.11.6, on scientific linux 6.6 with krb5 1.10.3
> 
> Regardless of what i set, i always ended up with the cache files made in /tmp, with the default names
> 
> from sssd.conf:
> 
> krb5_ccachedir = /tmp/krb5cache
> krb5_ccname_template = FILE:%d/krb5cc_%U_XXXXXX
> 
> 
> From the log:
> (Fri Feb  6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [dp_get_options] (0x0400): Option krb5_ccachedir has value /tmp/krb5cache
> (Fri Feb  6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [dp_get_options] (0x0400): Option krb5_ccname_template has value FILE:%d/krb5cc_%U_XXXXXX
> (Fri Feb  6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [check_and_export_options] (0x0100): The credential ccache name template has been explicitly set in sssd.conf, it is recommended to set default_ccache_name in krb5.conf instead so that a system default is used
> 
> So it appears that things are set, correctly .. however when i get a ticket, its always in the default ( /tmp ):
> 
> [cmp12 at dirac ~]$ klist 
> Ticket cache: FILE:/tmp/krb5cc_119549_juVcIs5202
> 
> I looked into setting default_ccache_name, however that option is not available until krb5 1.11 
> 
> Everything else is working as expected, any suggestions on making this work?

Please make sure that there is no session open for the user trying to
log in. SSSD tries to use the same credential cache for all sessions for
a given user.

HTH

bye,
Sumit

> 
> Thanks,
> -Chris
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users


More information about the sssd-users mailing list