On Friday, 13 August 2021 20:29:03 CEST Dirk Heinrichs wrote: > Carson Gaspar: > > On 8/13/2021 11:01 AM, Dirk Heinrichs wrote: > >> Tried the setup right away on Debian, but it doesn't work. Seems Debian > >> adds some random string to the cache name, even if it's set to KEYRING: > >> > >> % LC_ALL=C klist|head -1 > >> Ticket cache: KEYRING:persistent:1000:krb_ccache_inOQJ0u > > > > This may be OpenSSH (or at least Debian's patched version). If you log > > in via GSSAPI, sshd generates a unique per-session ccache, whether you > > like it or not. > > But this happens with local logins as well. However, I'm using sssd to > login via AD (samba). > > Bye... > > Dirk
ccache and ccache_dir options for pam_krb5 might help. Have a look at man pam_krb5. regards Markus Köberl
smime.p7s
Description: S/MIME cryptographic signature
