Public bug reported:

Binary package hint: krb5-user

The obvious use case is a user does something silly such as:

sudo kinit -p <principal> and promptly makes a root:root ccache file for
the specified principal.

Then the user later tries to kinit as that user and in fact everything
*looks* fine...the kinit doesn't print any errors and returns 0.
However the truth is nothing was done because the ccache is the wrong
permissions.

klist prints an error well enough:


klist: Credentials cache permissions incorrect while setting cache flags 
(ticket cache FILE:/var/run/ccache/krb5cc_45531_DIPCWB)

-A

** Affects: krb5 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/740477

Title:
  kinit should print an error if credentials cache has invalid
  permissions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to