Bug#1033164: krb5-doc: The documented DEFCCNAME is, probably, not the actual credential cache name

2023-03-20 Thread Karl O. Pinc
On Mon, 20 Mar 2023 12:16:58 -0600 Sam Hartman wrote: > pam_sssd always adds randomness to the cache name. > So, this is not an issue with krb5; pam_sssd is explicitly setting > KRB5CCNAME environment variable. As an FYI, I don't see any of the above documented (Ubuntu 22.04.2 LTS) in

Bug#1033164: closed by Sam Hartman (Re: Bug#1033164: krb5-doc: The documented DEFCCNAME is, probably, not the actual credential cache name)

2023-03-20 Thread Karl O. Pinc
> From: Sam Hartman > To: "Karl O. Pinc" , 1033164-d...@bugs.debian.org, Andreas > Hasenack > Cc: Benjamin Kaduk , 1033...@bugs.debian.org > Subject: Re: Bug#1033164: krb5-doc: The documented DEFCCNAME is, probably, > not the actual credential cache name > Date: Mon, 20 Mar 2023 12:16:58

Bug#1033164: krb5-doc: The documented DEFCCNAME is, probably, not the actual credential cache name

2023-03-20 Thread Sam Hartman
> "Karl" == Karl O Pinc writes: Karl> On Mon, 20 Mar 2023 09:27:39 -0300 Karl> Andreas Hasenack wrote: >> The extra randomness suffix happens when you login via >> ssh/gssapi. Karl> That is exactly how I'm logging in, authenticating credentials Karl> with MS Active

Bug#1033164: krb5-doc: The documented DEFCCNAME is, probably, not the actual credential cache name

2023-03-20 Thread Karl O. Pinc
On Mon, 20 Mar 2023 09:27:39 -0300 Andreas Hasenack wrote: > The extra randomness suffix happens when you login via ssh/gssapi. That is exactly how I'm logging in, authenticating credentials with MS Active Directory, with configuration set in /etc/sssd/sssd.conf and /etc/krb5.conf -- after

Bug#1033164: krb5-doc: The documented DEFCCNAME is, probably, not the actual credential cache name

2023-03-20 Thread Andreas Hasenack
The extra randomness suffix happens when you login via ssh/gssapi. On Sun, Mar 19, 2023 at 9:09 PM Benjamin Kaduk wrote: > > Hmm, on my local machines (one running Debian, one running Ubuntu) I appear > to be seeing the expected default /tmp/krb5cc_%{uid} behavior. > I couldn't quite follow how

Bug#1033164: krb5-doc: The documented DEFCCNAME is, probably, not the actual credential cache name

2023-03-19 Thread Benjamin Kaduk
Hmm, on my local machines (one running Debian, one running Ubuntu) I appear to be seeing the expected default /tmp/krb5cc_%{uid} behavior. I couldn't quite follow how your credentials were obtained; were they perhaps obtained as part of the login process? The PAM configuration might well be

Bug#1033164: krb5-doc: The documented DEFCCNAME is, probably, not the actual credential cache name

2023-03-18 Thread Karl O. Pinc
Package: krb5-doc Severity: normal Hi, I have not actually setup the necessary environment to reproduce this bug on Debian, but I have (tried to) examine the source code and believe the bug exists in Debian. I do know that this bug exists on Ubuntu, and have examined the Ubuntu-specific patches