[SSSD-users] SSSD krb5_ccache

Chris Petty chris.petty at duke.edu
Fri Feb 6 17:56:28 UTC 2015


No other users were logged in, but it must be some other issue with my sssd config ( that hasn’t presented any obvious problems ) … i just tried it on a virtual machine with my older config ( access_provider = ldap ) and the cache directy was changed without issue.

will investigate further.

-Chris



> On Feb 6, 2015, at 12:18 PM, Sumit Bose <sbose at redhat.com> wrote:
> 
> On Fri, Feb 06, 2015 at 03:50:19PM +0000, Chris Petty wrote:
>> 
>> In the near future i need to have my krb5 caches stored in a specific directory, so i was trying to set these defaults in sssd 1.11.6, on scientific linux 6.6 with krb5 1.10.3
>> 
>> Regardless of what i set, i always ended up with the cache files made in /tmp, with the default names
>> 
>> from sssd.conf:
>> 
>> krb5_ccachedir = /tmp/krb5cache
>> krb5_ccname_template = FILE:%d/krb5cc_%U_XXXXXX
>> 
>> 
>> From the log:
>> (Fri Feb  6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [dp_get_options] (0x0400): Option krb5_ccachedir has value /tmp/krb5cache
>> (Fri Feb  6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [dp_get_options] (0x0400): Option krb5_ccname_template has value FILE:%d/krb5cc_%U_XXXXXX
>> (Fri Feb  6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [check_and_export_options] (0x0100): The credential ccache name template has been explicitly set in sssd.conf, it is recommended to set default_ccache_name in krb5.conf instead so that a system default is used
>> 
>> So it appears that things are set, correctly .. however when i get a ticket, its always in the default ( /tmp ):
>> 
>> [cmp12 at dirac ~]$ klist 
>> Ticket cache: FILE:/tmp/krb5cc_119549_juVcIs5202
>> 
>> I looked into setting default_ccache_name, however that option is not available until krb5 1.11 
>> 
>> Everything else is working as expected, any suggestions on making this work?
> 
> Please make sure that there is no session open for the user trying to
> log in. SSSD tries to use the same credential cache for all sessions for
> a given user.
> 
> HTH
> 
> bye,
> Sumit
> 
>> 
>> Thanks,
>> -Chris
>> _______________________________________________
>> sssd-users mailing list
>> sssd-users at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users



More information about the sssd-users mailing list