On Mon, 04 Jan 2016, Alexander Bokovoy wrote:
On Mon, 04 Jan 2016, Marius Vollmer wrote:
Alexander Bokovoy <aboko...@redhat.com> writes:

Thanks. I think we actually could do better by using gss-proxy -- if
only cockpit-ws would cooperate[1]. I'll file a bug


-- when cockpit-ws launches cockpit-session it doesn't pass anything
from the environment cockpit-ws was launched with.

It uses NULL as the envp argument, which means that cockpit-session
inherits the environment from cockpit-ws, no?
You're right.

cockpit-session itself calls clearenv() very early, and that is probably
the reason why GSS_USE_PROXY doesn't work.

In that case adding GSS_USE_PROXY to env_names and moving restore of the
environment before the PAM processing would probably be a solution?
I've filed an issue to cockpit:

It is a bit more complicated due to cockpit-session fiddling with
/ Alexander Bokovoy

Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to