URL: https://github.com/SSSD/sssd/pull/5787 Author: sumit-bose Title: #5787: krb5: fix ccache ownership for offline Smartcard authentication Action: opened
PR body: """ During Smartcard authentication/PKINIT the krb5_child process is running as privileged user for some time to make sure pcscd allows access to the Smartcard. If SSSD is offline those privileges are currently not dropped before creating an empty ccache and as a result file based ccaches might have a wrong ownership. With the patch the privileges are dropped is SSSD is offline and the ccache is created with the expected ownership.
Resolves: https://github.com/SSSD/sssd/issues/5785
:fixes: ccache files are created with the right ownership during offline Smartcard authentication """
To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5787/head:pr5787 git checkout pr5787