Re: [SSSD-users] SSSD krb5_ccache
On Fri, Feb 06, 2015 at 03:50:19PM +0000, Chris Petty wrote:
In the near future i need to have my krb5 caches stored in a specific directory, so i was
trying to set these defaults in sssd 1.11.6, on scientific linux 6.6 with krb5 1.10.3
Regardless of what i set, i always ended up with the cache files made in /tmp, with the
default names
from sssd.conf:
krb5_ccachedir = /tmp/krb5cache
krb5_ccname_template = FILE:%d/krb5cc_%U_XXXXXX
From the log:
(Fri Feb 6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [dp_get_options] (0x0400): Option
krb5_ccachedir has value /tmp/krb5cache
(Fri Feb 6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [dp_get_options] (0x0400): Option
krb5_ccname_template has value FILE:%d/krb5cc_%U_XXXXXX
(Fri Feb 6 10:36:03 2015) [sssd[be[dhe.duke.edu]]] [check_and_export_options] (0x0100):
The credential ccache name template has been explicitly set in sssd.conf, it is
recommended to set default_ccache_name in krb5.conf instead so that a system default is
used
So it appears that things are set, correctly .. however when i get a ticket, its always
in the default ( /tmp ):
[cmp12@dirac ~]$ klist
Ticket cache: FILE:/tmp/krb5cc_119549_juVcIs5202
I looked into setting default_ccache_name, however that option is not available until
krb5 1.11
Everything else is working as expected, any suggestions on making this work?
Please make sure that there is no session open for the user trying to
log in. SSSD tries to use the same credential cache for all sessions for
a given user.
HTH
bye,
Sumit
Thanks,
-Chris
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users