#1866 SSSD changes primary creds on authentication
Closed: Fixed None Opened 6 years ago by simo.

When using the DIR: credential cache type any authentication through SSSD will switch the default primary credentials in use.
When using 2 sets of credentials this causes a switch of primary crdentials on screen unlock for example.

We may want to consider not switching by default if another primary credential is present (or switching back after we poppulate the ccache with fresh credentials). Maybe conrolled by an option.

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.11 beta
rhbz: => todo

This might have been addressed by other ticket #1936. Test and close if this is the case. Otherwise re-triage.

changelog: =>
milestone: SSSD 1.13 beta => Interim Bucket

It should be fixed by commit d673bd3

Fields changed

milestone: Interim Bucket => SSSD 1.12 beta

krb5_child was rewritten in the branch 1.11 a6a0d4e

I tested with DIR and KEYRING ccache
krb5_ccname_template = DIR:/tmp/user/%U/ccache_%p
krb5_ccname_template = KEYRING:persistent:%U

Primary credentials was not changed on the second parallel authentication.

resolution: => fixed
status: new => closed

Fields changed

rhbz: todo => 0

Metadata Update from @simo:
- Issue set to the milestone: SSSD 1.12 beta

2 years ago

Login to comment on this ticket.