#1359 ipa-client-install should configure sssd to store password if offline
Closed: Fixed None Opened 8 years ago by rcritten.


A common use case is when a user logs in while offline, then goes online (e.g., after establishing a VPN connection) and then tries to access IPA hosts/services. This fails currently because no Kerberos ticket is available after an offline login. It would be nice if ipa-client-install would configure (at least optionally) SSSD to store password if offline (i.e., set krb5_store_password_if_offline in sssd.conf for the domain).

  1. Turn on by default
  2. Add an option to turn it off during the client install.

Metadata Update from @rcritten:
- Issue assigned to jcholast
- Issue set to the milestone: FreeIPA 2.1 - 2011/07

2 years ago

Login to comment on this ticket.