#4116 koji-gc: dedicated Kerberos credential cache to avoid conflicts with root user's credential cache
Closed: Fixed 22 days ago by tkopecek. Opened 11 months ago by amessina.

kojira and kojid both use their own Kerberos credential cache (equivalent of KRB5CCNAME) which separates the ccaches from the default root user on the machine, even though the services run as root by default).

Please extend koji-gc to use it's own (configurable, default to /var/tmp just as kojira and kojid do) Kerberos credential cache to achieve a similar result.

For now, I'm using the following in /etc/systemd/system/koji-gc.service.d/krb5ccname.conf:

[Service]
Environment=KRB5CCNAME=FILE:/var/tmp/kojigc.ccache

Metadata Update from @tkopecek:
- Custom field Size adjusted to None
- Issue set to the milestone: 1.36

10 months ago

Metadata Update from @mikem:
- Issue set to the milestone: 1.35.1 (was: 1.36)

10 months ago

Metadata Update from @mikem:
- Issue set to the milestone: 1.36 (was: 1.35.1)

10 months ago

Metadata Update from @jcupova:
- Issue tagged with: testing-ready

8 months ago

Metadata Update from @tkopecek:
- Issue untagged with: testing-ready
- Issue tagged with: testing-basic

2 months ago

Metadata Update from @mfilip:
- Issue tagged with: testing-done

a month ago

Log in to comment on this ticket.

Metadata
Related Pull Requests
  • #4171 Merged 22 days ago