Am Thu, Apr 07, 2022 at 01:34:27PM -0000 schrieb Francis Augusto Medeiros-Logeay: > Hi, > > Having some RHEL 8 machines as vdi on a VMware Horizon desktop pool, > we see that when reconnecting to a machine, system-auth and its > pam-stack is executed (at least I think so). > Is there a way to make pam_sss actually fetch a new TGT when doing so, > just like entering a password when the screensaver does?
Hi, iirc there is a special VMware PAM module which let user pass without entering the password if they are already authenticated at the VMware infrastructure. So I would expect that pam_sss is not called at all. Additionally, pam_sss would always need a password to get a TGT with the help of the SSSD backend. bye, Sumit > > Best, > Francis > _______________________________________________ > sssd-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
