#3683 List of ticket caches in klist -A keeps growing

Created 6 months ago by rishi
Modified a month ago

I added my FEDORAPROJECT.ORG and REDHAT.COM principals through the GNOME Online Accounts UI on Fedora 27, probably used kswitch -p to ensure that the credentials cache for REDHAT.COM is set as default, rebooted the machine, and after an hour or so:

[rishi@kolache ~]$ klist -A
Ticket cache: KCM:1000:15237
Default principal: dray@REDHAT.COM

Valid starting       Expires              Service principal
2018-03-19T17:41:13  2018-03-20T03:33:35  HTTP/errata-web-01.host.prod.eng.bos.redhat.com@
    renew until 2018-03-20T17:33:34
2018-03-19T17:33:35  2018-03-20T03:33:35  krbtgt/REDHAT.COM@REDHAT.COM
    renew until 2018-03-20T17:33:34
2018-03-19T17:41:13  2018-03-20T03:33:35  HTTP/errata-web-01.host.prod.eng.bos.redhat.com@REDHAT.COM
    renew until 2018-03-20T17:33:34

Ticket cache: KCM:1000:9617
Default principal: rishi@FEDORAPROJECT.ORG

Valid starting       Expires              Service principal
2018-03-19T17:48:45  2018-03-20T17:48:42  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG

Ticket cache: KCM:1000:35605
Default principal: rishi@FEDORAPROJECT.ORG

Valid starting       Expires              Service principal
2018-03-19T17:33:39  2018-03-20T17:33:36  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG

Ticket cache: KCM:1000:97797
Default principal: rishi@FEDORAPROJECT.ORG

Valid starting       Expires              Service principal
2018-03-19T18:03:47  2018-03-20T18:03:45  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG

Ticket cache: KCM:1000
Default principal: rishi@FEDORAPROJECT.ORG

Valid starting       Expires              Service principal
2018-03-19T17:18:39  2018-03-20T17:18:35  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG

Ticket cache: KCM:1000:33382
Default principal: rishi@FEDORAPROJECT.ORG

Valid starting       Expires              Service principal
2018-03-19T18:18:54  2018-03-20T18:18:51  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG

Ticket cache: KCM:1000:77222
Default principal: rishi@FEDORAPROJECT.ORG

Valid starting       Expires              Service principal
2018-03-19T18:33:58  2018-03-20T18:33:55  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG

I definitely didn't add the FEDORAPROJECT.ORG principal multiple times - neither through kinit nor through GOA.

I have:

krb5-libs-1.15.2-7.fc27.x86_64
gnome-online-accounts-3.26.2-1.fc27.x86_64
sssd-debuginfo-1.16.0-8.fc27.x86_64
sssd-1.16.1-1.fc27.x86_64
sssd-client-1.16.1-1.fc27.x86_64
sssd-krb5-1.16.1-1.fc27.x86_64
sssd-kcm-debuginfo-1.16.0-8.fc27.x86_64
sssd-common-pac-1.16.1-1.fc27.x86_64
sssd-kcm-1.16.1-1.fc27.x86_64
sssd-ad-1.16.1-1.fc27.x86_64
sssd-debugsource-1.16.0-8.fc27.x86_64
sssd-proxy-1.16.1-1.fc27.x86_64
sssd-common-1.16.1-1.fc27.x86_64
sssd-ipa-1.16.1-1.fc27.x86_64
sssd-krb5-common-1.16.1-1.fc27.x86_64
sssd-nfs-idmap-1.16.0-8.fc27.x86_64
sssd-ldap-1.16.1-1.fc27.x86_64
6 months ago

Metadata Update from @fidencio:
- Issue assigned to fidencio

a month ago

Metadata Update from @fidencio:
- Assignee reset

Login to comment on this ticket.

cancel