SSSD and Kerberos tickets

Stephen Gallagher sgallagh at redhat.com
Tue Aug 17 20:28:12 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/17/2010 04:23 PM, Christoph Höger wrote:
> 
>>> Ok, since my university does not give me any infos about that LDAP (and
>>> I do not want to rely on their IT for logging in locally), is there no
>>> other solution to simply run kstart from pam and querying for the ticket
>>> password at startup with sssd?
>>
>> SSSD isn't going to help you in this case. What you probably just want
>> to do is write a script to include in your .bash_profile script so that
>> when you log in, your shell calls "cat /path/to/mysecretpassword.txt
>> |kinit" when you log in.
> 
> Hnn. Does not sound like what I want. I know that this "grep a ticket
> upon login" semantic can be added to pam, does sssd interfere somehow,
> or can I just apply $RANDOM_TUTORIAL?
> 
> 

Please rephrase your question. I have no idea what exactly you're trying
to accomplish.

If you had access to the school's LDAP setup (and I suspect they'd tell
you if you asked) SSSD does what you're looking for internally.

But if I'm understanding you right, you want to just use a local login
and do a kinit (I don't know what 'kstart' means) when you log in.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkxq8NwACgkQeiVVYja6o6PPTgCgm6vyZXoq4IkF94lchs8pOoqT
dZ8AoKebUl1qCLTzEiVJHdCSho8Lh68n
=a3Nt
-----END PGP SIGNATURE-----


More information about the users mailing list