Actually I just checked a Rocky 10 system - keytab appears to be root:sssd 0640, so maybe people won't care if SSSD manages and sets host keytab ownership and perms - that's gotta be something that RHEL is doing, just not sure how - if they have some sort of post-keytab- creation handler that fires maybe. Or a SSSD service preflight check&correct.
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2139337 Title: don't run as root, instead use --with-sssd-user=sssd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/2139337/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
