2745b01 KRB5: Move all ccache operations to krb5_child.c

Authored and Committed by jhrozek 6 years ago
    KRB5: Move all ccache operations to krb5_child.c
    
    The credential cache operations must be now performed by the krb5_child
    completely, because the sssd_be process might be running as the sssd
    user who doesn't have access to the ccaches.
    
    src/providers/krb5/krb5_ccache.c is still linked against libsss_krb5
    until we fix Kerberos ticket renewal as non-root.
    
    Also includes a new error code that indicates that the back end should
    remove the old ccache attribute -- the child can't do that if it's
    running as the user.
    
    Related:
    https://fedorahosted.org/sssd/ticket/2370
    
    Reviewed-by: Sumit Bose <sbose@redhat.com>
    Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
    
        
file modified
+11 -2
file modified
+28 -195
file modified
+200 -8
file modified
+1 -2
file modified
+1 -0
file modified
+1 -0