New subject: [sssd PR#5787][+Accepted] krb5: fix ccache ownership for offline Smartcard authentication

16 Sep 2021


      URL: https://github.com/SSSD/sssd/pull/5787
Author: sumit-bose
 Title: #5787: krb5: fix ccache ownership for offline Smartcard authentication
Action: opened
PR body:
"""
During Smartcard authentication/PKINIT the krb5_child process is running
as privileged user for some time to make sure pcscd allows access to the
Smartcard. If SSSD is offline those privileges are currently not dropped
before creating an empty ccache and as a result file based ccaches might
have a wrong ownership. With the patch the privileges are dropped is
SSSD is offline and the ccache is created with the expected ownership.
Resolves: https://github.com/SSSD/sssd/issues/5785
:fixes: ccache files are created with the right ownership during offline
  Smartcard authentication
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5787/head:pr5787
git checkout pr5787

[sssd PR#5787][opened] krb5: fix ccache ownership for offline Smartcard authentication