On Пан, 22 чэр 2026, Kevin Fenzi wrote:
On Mon, Jun 22, 2026 at 02:27:19PM +0000, Peter Oliver wrote:
Gary Buhrmaster wrote:
> As I recall with recent Fedora's, and sssd-kcm
> installed (which drops in some files into
> /etc/krb5.conf.d), and running, it (ticket renewal)
> all just works (at least I don't need to take
> action or think about it, and not thinking is
> one of my new core competencies).
I don't think it's sssd-kcm doing this in the default configuration, since I
don't see it happen on Fedora KDE 44, but I do see it on Fedora Workstation 44.
Perhaps Gnome Online Accounts is now able to cope as well at renewals where
the original ticket was requested with an OTP as it can without?
Yes, gnome online accounts can renew (but not get an initial tgt) when
you have an otp enrolled. At least it does here.
I have submitted upstream PR for GOA couple years ago but then the GOA
upstream work basically stopped due to halfline's reassignment at
$dayjob. The bits to support OTP and passkey are in place, they need
GOA-specific integration part that I have no experience with.
https://gitlab.gnome.org/GNOME/gnome-online-accounts/-/merge_requests/250
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
--
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
