Changes between Initial Version and Version 1 of Ticket #1592


Ignore:
Timestamp:
11/19/17 02:10:17 (3 years ago)
Author:
slz
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #1592 – Description

    initial v1  
    11In Fedora 27, Kerberos now defaults to using sssd's new KCM as its default credentials cache. See the Fedora wiki page: https://fedoraproject.org/wiki/Changes/KerberosKCMCache 
     2as well as the sssd documentation for the KCM implentation: 
     3https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html 
    24 
    3 If this feature of sssd lands in Ubuntu, we should have a config package that can be installed to switch the default krb5 cache to the sssd KCM. Among other things, sssd will automatically renew tickets, partially reducing the need for cont-renew-notify. 
     5If this feature of sssd lands in Ubuntu, we should have a config package that can be installed to switch the default krb5 cache to the sssd KCM. This brings a feature (userspace active management of Kerberos tickets cache, with possible namespace isolation) that has long existed on macOS to Debathena. Among other things, sssd will automatically renew tickets, partially reducing the need for cont-renew-notify.