Keytab-based initiator creds design

Russ Allbery rra at stanford.edu
Thu Jun 7 16:18:21 EDT 2012


Simo Sorce <simo at redhat.com> writes:
> On Thu, 2012-06-07 at 15:59 -0400, Greg Hudson wrote:

>> (On a complete tangent, how is Fedora going to deal with multiple login
>> sessions by the same user?)

> They are going to share the same ccache for now.

Just FYI, our users would consider it a showstopper bug if a shared cache
is used and is destroyed when only one (but not all) of their sessions
ended.  I don't know if you have some way of dealing with that in your
pam_krb5.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>


More information about the krbdev mailing list