[OpenAFS] Redux: Linux: systemctl --user vs. AFS

[Markus Köberl]

--nextPart5740084.lOV4Wx5bFT
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

On Friday, 13 August 2021 20:29:03 CEST Dirk Heinrichs wrote:
> Carson Gaspar:
> > On 8/13/2021 11:01 AM, Dirk Heinrichs wrote:
> >> Tried the setup right away on Debian, but it doesn't work. Seems Debian
> >> adds some random string to the cache name, even if it's set to KEYRING:
> >>=20
> >>      % LC_ALL=3DC klist|head -1
> >>      Ticket cache: KEYRING:persistent:1000:krb_ccache_inOQJ0u
> >=20
> > This may be OpenSSH (or at least Debian's patched version). If you log
> > in via GSSAPI, sshd generates a unique per-session ccache, whether you
> > like it or not.
>=20
> But this happens with local logins as well. However, I'm using sssd to
> login via AD (samba).
>=20
> Bye...
>=20
>     Dirk


ccache and ccache_dir options for pam_krb5 might help.
Have a look at man pam_krb5.


regards
Markus K=C3=B6berl
--nextPart5740084.lOV4Wx5bFT
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Disposition: attachment; filename="smime.p7s"
Content-Transfer-Encoding: base64
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=


--nextPart5740084.lOV4Wx5bFT--