[SSSD-users] SSSD krb5_ccache
Chris Petty
chris.petty at duke.edu
Fri Feb 6 17:56:28 UTC 2015
No other users were logged in, but it must be some other issue with my sssd config ( that hasn’t presented any obvious problems ) … i just tried it on a virtual machine with my older config ( access_provider = ldap ) and the cache directy was changed without issue.
will investigate further.
-Chris
> On Feb 6, 2015, at 12:18 PM, Sumit Bose <sbose at redhat.com> wrote:
>
> On Fri, Feb 06, 2015 at 03:50:19PM +0000, Chris Petty wrote:
>>
>> In the near future i need to have my krb5 caches stored in a specific directory, so i was trying to set these defaults in sssd 1.11.6, on scientific linux 6.6 with krb5 1.10.3
>>
>> Regardless of what i set, i always ended up with the cache files made in /tmp, with the default names
>>
>> from sssd.conf:
>>
>> krb5_ccachedir = /tmp/krb5cache
>> krb5_ccname_template = FILE:%d/krb5cc_%U_XXXXXX
>>
>>
>> From the log:
>> (Fri Feb 6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [dp_get_options] (0x0400): Option krb5_ccachedir has value /tmp/krb5cache
>> (Fri Feb 6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [dp_get_options] (0x0400): Option krb5_ccname_template has value FILE:%d/krb5cc_%U_XXXXXX
>> (Fri Feb 6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [check_and_export_options] (0x0100): The credential ccache name template has been explicitly set in sssd.conf, it is recommended to set default_ccache_name in krb5.conf instead so that a system default is used
>>
>> So it appears that things are set, correctly .. however when i get a ticket, its always in the default ( /tmp ):
>>
>> [cmp12 at dirac ~]$ klist
>> Ticket cache: FILE:/tmp/krb5cc_119549_juVcIs5202
>>
>> I looked into setting default_ccache_name, however that option is not available until krb5 1.11
>>
>> Everything else is working as expected, any suggestions on making this work?
>
> Please make sure that there is no session open for the user trying to
> log in. SSSD tries to use the same credential cache for all sessions for
> a given user.
>
> HTH
>
> bye,
> Sumit
>
>>
>> Thanks,
>> -Chris
>> _______________________________________________
>> sssd-users mailing list
>> sssd-users at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
More information about the sssd-users
mailing list