openssh unix dev - Aug 2017 - Feature request

Dear Developer Team,

at moment openssh ignores the 'default_ccache_name' variable in
'/etc/krb5.conf'. So the KRB5CCNAME is set to the FILE based credential
cache. Jakub Jelen pointed out that there is a Fedora/RHEL patch which
takes care of that.

http://pkgs.fedoraproject.org/cgit/rpms/openssh.git/tree/openssh-6.3p1-krb5-use-default_ccache_name.patch


Is it possible to add the patch to the upstream? Thanks in advance.

Regards,

Thorsten

On Wed, 2017-08-09 at 11:25 +0200, tseegerkrb wrote:
> Dear Developer Team,
> 
> at moment openssh ignores the 'default_ccache_name' variable in
> '/etc/krb5.conf'. So the KRB5CCNAME is set to the FILE based
> credential
> cache. Jakub Jelen pointed out that there is a Fedora/RHEL patch
> which
> takes care of that.
> 
> http://pkgs.fedoraproject.org/cgit/rpms/openssh.git/tree/openssh-6.3p
> 1-krb5-use-default_ccache_name.patch
> 
> 
> Is it possible to add the patch to the upstream? Thanks in advance.
Hello,
this would be very useful feature, but it still needs some tweaks to
resolve before submitting final patch, because there are problems with
the new ccache types [1]. It is on my to do list, but feel free to pick
up the changes or propose improvements.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1199363

Regards,
-- 
Jakub Jelen
Software Engineer
Security Technologies
Red Hat, Inc.