#1000 Add a Kerberos provider option to set krb5_get_init_creds_opt_set_proxiable

Created 5 years ago by jhrozek
Modified a month ago

This would be analogous to kinit's -p: request proxiable tickets.

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.8.0
priority: major => minor

Fields changed

type: defect => enhancement

Fields changed

blockedby: =>
blocking: =>
milestone: SSSD 1.8.0 => SSSD 1.9.0

Fields changed

milestone: SSSD 1.9.0 => SSSD Kerberos improvements

Fields changed

rhbz: => 0

I've spent some more time thinking about this. While it's an easy knob to provide, and I initially was in favor of it, I can't come up with any scenarios where I'd want to explicitly set SSSD's behavior to be different from the rest of the system, which heeds the default value for this setting as set (or not) in /etc/krb5.conf. It's less work for the administrator to just have to change it once, in /etc/krb5.conf, so I'm going to mark this as won't-fix.

cc: => nalin
feature_milestone: =>
proposed_priority: => Undefined
resolution: => wontfix
status: new => closed

a month ago

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD Kerberos Improvements Feature

Login to comment on this ticket.

enhancement

SSSD

1.6.1

0

0

0

nalin

cancel