[Freeipa-users] Re: Running 'sudo su' creates kerberos ticket for user on old IPA (4.6) not on new 4.10
Am Wed, May 03, 2023 at 12:00:16PM -0000 schrieb Finn Fysj via
FreeIPA-users:
Hi,
the behavior was changed due to
https://bugzilla.redhat.com/show_bug.cgi?id=1879869
https://github.com/SSSD/sssd/issues/5660
To switch back to the old behavior you can add
pam_response_filter=-ENV:KRB5CCNAME:sudo-i, -ENV:KRB5CCNAME:sudo
to the [pam] section in sssd.conf or as snippet in /etc/sssd.d/conf.d.
HTH
bye,
Sumit
Not able to view this Sumit, but thanks.
You are not authorized to access bug #1879869.
Most likely the bug has been restricted for internal development processes and we cannot
grant access.
If your role requires it then you may be able to use the self service Request Group
Membership workflow to gain the permissions required to access this bug.
If you are a Red Hat customer with an active subscription, please visit the Red Hat
Customer Portal for assistance with your issue
If you are a Fedora Project user and require assistance, please consider using one of the
mailing lists we host for the Fedora Project.