#1866 SSSD changes primary creds on authentication
Closed: Fixed None Opened 7 years ago by simo.

When using the DIR: credential cache type any authentication through SSSD will switch the default primary credentials in use.
When using 2 sets of credentials this causes a switch of primary crdentials on screen unlock for example.

We may want to consider not switching by default if another primary credential is present (or switching back after we poppulate the ccache with fresh credentials). Maybe conrolled by an option.


Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.11 beta
rhbz: => todo

This might have been addressed by other ticket #1936. Test and close if this is the case. Otherwise re-triage.

changelog: =>
milestone: SSSD 1.13 beta => Interim Bucket

It should be fixed by commit d673bd3

Fields changed

milestone: Interim Bucket => SSSD 1.12 beta

krb5_child was rewritten in the branch 1.11 a6a0d4e

I tested with DIR and KEYRING ccache
krb5_ccname_template = DIR:/tmp/user/%U/ccache_%p
krb5_ccname_template = KEYRING:persistent:%U

Primary credentials was not changed on the second parallel authentication.

resolution: => fixed
status: new => closed

Fields changed

rhbz: todo => 0

Metadata Update from @simo:
- Issue set to the milestone: SSSD 1.12 beta

3 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/2908

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata