#3683 List of ticket caches in klist -A keeps growing
Closed: wontfix a year ago by pbrezina. Opened 3 years ago by rishi.

I added my FEDORAPROJECT.ORG and REDHAT.COM principals through the GNOME Online Accounts UI on Fedora 27, probably used kswitch -p to ensure that the credentials cache for REDHAT.COM is set as default, rebooted the machine, and after an hour or so:

[rishi@kolache ~]$ klist -A
Ticket cache: KCM:1000:15237
Default principal: dray@REDHAT.COM

Valid starting       Expires              Service principal
2018-03-19T17:41:13  2018-03-20T03:33:35  HTTP/errata-web-01.host.prod.eng.bos.redhat.com@
    renew until 2018-03-20T17:33:34
2018-03-19T17:33:35  2018-03-20T03:33:35  krbtgt/REDHAT.COM@REDHAT.COM
    renew until 2018-03-20T17:33:34
2018-03-19T17:41:13  2018-03-20T03:33:35  HTTP/errata-web-01.host.prod.eng.bos.redhat.com@REDHAT.COM
    renew until 2018-03-20T17:33:34

Ticket cache: KCM:1000:9617
Default principal: rishi@FEDORAPROJECT.ORG

Valid starting       Expires              Service principal
2018-03-19T17:48:45  2018-03-20T17:48:42  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG

Ticket cache: KCM:1000:35605
Default principal: rishi@FEDORAPROJECT.ORG

Valid starting       Expires              Service principal
2018-03-19T17:33:39  2018-03-20T17:33:36  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG

Ticket cache: KCM:1000:97797
Default principal: rishi@FEDORAPROJECT.ORG

Valid starting       Expires              Service principal
2018-03-19T18:03:47  2018-03-20T18:03:45  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG

Ticket cache: KCM:1000
Default principal: rishi@FEDORAPROJECT.ORG

Valid starting       Expires              Service principal
2018-03-19T17:18:39  2018-03-20T17:18:35  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG

Ticket cache: KCM:1000:33382
Default principal: rishi@FEDORAPROJECT.ORG

Valid starting       Expires              Service principal
2018-03-19T18:18:54  2018-03-20T18:18:51  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG

Ticket cache: KCM:1000:77222
Default principal: rishi@FEDORAPROJECT.ORG

Valid starting       Expires              Service principal
2018-03-19T18:33:58  2018-03-20T18:33:55  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG

I definitely didn't add the FEDORAPROJECT.ORG principal multiple times - neither through kinit nor through GOA.

I have:

krb5-libs-1.15.2-7.fc27.x86_64
gnome-online-accounts-3.26.2-1.fc27.x86_64
sssd-debuginfo-1.16.0-8.fc27.x86_64
sssd-1.16.1-1.fc27.x86_64
sssd-client-1.16.1-1.fc27.x86_64
sssd-krb5-1.16.1-1.fc27.x86_64
sssd-kcm-debuginfo-1.16.0-8.fc27.x86_64
sssd-common-pac-1.16.1-1.fc27.x86_64
sssd-kcm-1.16.1-1.fc27.x86_64
sssd-ad-1.16.1-1.fc27.x86_64
sssd-debugsource-1.16.0-8.fc27.x86_64
sssd-proxy-1.16.1-1.fc27.x86_64
sssd-common-1.16.1-1.fc27.x86_64
sssd-ipa-1.16.1-1.fc27.x86_64
sssd-krb5-common-1.16.1-1.fc27.x86_64
sssd-nfs-idmap-1.16.0-8.fc27.x86_64
sssd-ldap-1.16.1-1.fc27.x86_64

Metadata Update from @fidencio:
- Issue assigned to fidencio

3 years ago

Metadata Update from @fidencio:
- Assignee reset

2 years ago

Metadata Update from @pbrezina:
- Issue tagged with: Canditate to close

a year ago

Thank you for taking time to submit this request for SSSD. Unfortunately this issue was not given priority and the team lacks the capacity to work on it at this time.

Given that we are unable to fulfill this request I am closing the issue as wontfix.

If the issue still persist on recent SSSD you can request re-consideration of this decision by reopening this issue. Please provide additional technical details about its importance to you.

Thank you for understanding.

Metadata Update from @pbrezina:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)

a year ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4702

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata