search for: kcm

https://bugzilla.mindrot.org/show_bug.cgi?id=2775 Bug ID: 2775 Summary: Improve kerberos credential forwarding support Product: Portable OpenSSH Version: 7.5p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: Kerberos support Assignee:

I have not looked at Kerberos is years. But it looks like KRB5CCNAME comes from: https://github.com/openssh/openssh-portable/blob/master/gss-serv-krb5.c#L134-L197 But it depends on which version of Kerberos you have, and if you are also use PAM. Google for: heimdal kerberos cache name It looks like there is now a SSSD Kerberos Cache Manager rather then storing in individual file. On 6/11/2024

...using the ccache that is configured in the conf file. This behavior occurs on Ubuntu 20.04 and 19.10 as well as Debian 10.5. Swapping krb5-user for heimdal-clients is not a desirable nor functional solution for me because I want to utilize either the "KEYRING:persistent:%{uid}" or "KCM:" ccaches; both of which I'm unable to get working with heimdal-clients. On the same system SSSD, pam_mount and mount, all work with krb5-user and honor the configured ccache. I'd like to point out that the smbclient on CentOS 7 and 8 doesn't have this issue and works with "kr...

...gt; > > the > > > > credcache. > > > > > > > > What's the right approach to fix this? Are we stuck with scanning > > > > /tmp > > > > forever? > > > > > > I think the right approach in the long run will be the KCM we are > > > building in SSSD and planning to make the default cache type for > > > F26. > > > > > > For file ccaches you are out of luck, even scanning /tmp can fail > > > as > > > users can decide to put them elsewhere. > > > > &...

...ed this by accident when checking to ensure the /etc/nsswitch.conf was proper and noticed sssd was there AFTER winbind! # yum list installed | grep sssd sssd-client.x86_64 2.8.2-2.el8 @anaconda sssd-common.x86_64 2.8.2-2.el8 @anaconda sssd-kcm.x86_64 2.8.2-2.el8 @anaconda sssd-nfs-idmap.x86_64 2.8.2-2.el8 @anaconda The @anaconda means the installer did this but even so I did a clean install to confirm as well.

...gt; Did this: > [root @ ms2 ~] # rpm -qa | grep realmd > [root @ ms2 ~] # rpm -qa | grep sss > libsss_certmap-2.2.0-19.el8.x86_64 > sssd-common-2.2.0-19.el8.x86_64 > libsss_sudo-2.2.0-19.el8.x86_64 > sssd-client-2.2.0-19.el8.x86_64 > sssd-nfs-idmap-2.2.0-19.el8.x86_64 > sssd-kcm-2.2.0-19.el8.x86_64 > libsss_idmap-2.2.0-19.el8.x86_64 > libsss_nss_idmap-2.2.0-19.el8.x86_64 > libsss_autofs-2.2.0-19.el8.x86_64 > [root @ ms2 ~] # dnf remove sssd-common-2.2.0-19.el8.x86_64 sssd-client-2.2.0-19.el8.x86_64 sssd-nfs-idmap-2.2.0-19.el8.x86_64 > sssd-kcm-2.2.0-19.el8.x...

...ould like to get input on is the configuration. I do not have any idea how compiz configuration is working. E.g. how should I add a theme selection dialog? Aurorae themes can be downloaded form kde-look.org, so a GHNS dialog would be something nice. In KDE trunk everything is available as a new KCM, so a possible approach would be to fork the KCM and remove all KDecoration related code. Concerning configuration I also do not know how the decoration should react on things like wheel events, double click, moving, etc. So those things are currently not yet implemented or hardcoded. Looking...

On Fri, 2017-02-10 at 11:15 -0600, Chad William Seys wrote: > Hi Jeff, > > > So we have a default credcache for the user for whom we are operating > > as, but we can't get the default principal name from it. My guess is > > that it's not finding the > > This mount is run by root UID=0 and seems to be find that credential > cache without problem (earlier

...orced by extended group file permissions, which the samba servers are configured to see via nsswitch.conf. The group information (gidnumber) does not exist in AD. samba.keytab contains cifs service principals for every samba server in a DNS cluster so that connecting via smbclient --use-krb5-ccache=KCM:1000 can be done against both the DNS round robin alias //samba.ad.domain.com as well as against each individual samba server in the DNS RR cluster e.g //samba_node_1 and //samba_node_2, etc. The above breaks when I try to move to SLES15 SP4, kernel 5.14.21, samba-4.15.8. Apparently winbind is re...

...This > > behavior occurs on Ubuntu 20.04 and 19.10 as well as Debian 10.5. > > > > Swapping krb5-user for heimdal-clients is not a desirable > nor functional > > solution for me because I want to utilize either the > > "KEYRING:persistent:%{uid}" or "KCM:" ccaches; both of > which I'm unable to > > get working with heimdal-clients. On the same system SSSD, > pam_mount and > > mount, all work with krb5-user and honor the configured > ccache. I'd like to > > point out that the smbclient on CentOS 7 and 8 doe...

I know, and i have him the "samba" solution, because ... I dont know sssd also. And i dont get the fuss on samba+winbind or samba+sssd I have 3 services running minimal : samba winbind user-homes.automount Everything works as it should. I hope, and i'll add the note here also. NOTE ! My packages are NOT sssd compliant, you need to recompile SSSD yourselfs agains my samba

...at part of my initial troubleshooting of this issue involved using heimdal-clients instead of krb5-user and that when using heimdal-clients for kerberos the smbclient would use whatever ccache was configured as the default ccache name in krb5.conf with the exception of "KEYRING" and "KCM" because heimdal would consistently error out that both of those are "unknown credential cache types". Effectively, only "FILE" and "DIR" ccache types would work with heimdal. Continuing on... The heimdal variant of kerberos uses a different parameter name for t...

....el7_6.5.x86_64.rpm d3e57105bd978705eb9260b0a3ad8efa6a1ce52e9595f5fcf27ad53dec12fe23 sssd-dbus-1.16.2-13.el7_6.5.x86_64.rpm 10e94d59bd7ceb283cca52c5e57b02e5146c74c4d15b3543b32db298116ba038 sssd-ipa-1.16.2-13.el7_6.5.x86_64.rpm 0587ea5f2693c851ba38ae9cd4216c2f241084fc566d0cc194286691895d51d0 sssd-kcm-1.16.2-13.el7_6.5.x86_64.rpm 1635bf56824fd0c516587b167841dc4695f3efc2618b645471d5a86fed848307 sssd-krb5-1.16.2-13.el7_6.5.x86_64.rpm 9d37dc26f2324511e078d145ed6028ad80bf66cc58ecf455258cba020036b448 sssd-krb5-common-1.16.2-13.el7_6.5.x86_64.rpm c100f7a904cc696b19e9ca5b970104d63a05429864d13ec9d3869...

....el7_7.1.x86_64.rpm e661ad4b1d660fd9071608b6e94db0a391742b086a43bceb4bd8efaae51c5989 sssd-dbus-1.16.4-21.el7_7.1.x86_64.rpm d93e610329cc767364f6375c7021ad0d8a5f54c89f9976a1222c5803295bcd12 sssd-ipa-1.16.4-21.el7_7.1.x86_64.rpm 41631f068f59ea36976e7aba0ed2eb9163a9eb316e979c71e5dc9d96a64f4dca sssd-kcm-1.16.4-21.el7_7.1.x86_64.rpm 88d612dccade6928476661ce9bbec358d5fb94b37e99ea4987357e440390e8be sssd-krb5-1.16.4-21.el7_7.1.x86_64.rpm 4faf4fca69f9861c5ed4bc0cb02309a8cab4feb1fad4e4974855b9806d6afc10 sssd-krb5-common-1.16.4-21.el7_7.1.x86_64.rpm 59ab8858302361570df1e322809a23d5d65dd48017442bb8a447c...

....el7_8.4.x86_64.rpm a0117e31fc98d241300acd5f5c842689f64c41ae0dafd733ae76211a536b99a9 sssd-dbus-1.16.4-37.el7_8.4.x86_64.rpm 3ed23e867739a86334b5c8e928dfd2c6111426cec4c14570b43fc89b25ed7fa3 sssd-ipa-1.16.4-37.el7_8.4.x86_64.rpm a1a3dbd2e49bffcd5290a411f675d0202a93bbe4567cc51c81a0771fb31715ec sssd-kcm-1.16.4-37.el7_8.4.x86_64.rpm 94a2e518b7228034d268b8a114a1b1f233f017cb28dffcf88e82c2207fd73d4a sssd-krb5-1.16.4-37.el7_8.4.x86_64.rpm 060c08fb78f3758c88f9a4a6ee5eeba408b602f1d3357b83180566a4d8d93916 sssd-krb5-common-1.16.4-37.el7_8.4.x86_64.rpm 4ec48a061d2ab2c5e771589ff4dbe2d7e8334ea2e2d2e9c3834f8...

....el7_4.6.x86_64.rpm 0410533de3af2fad619edb74cee8b2fee28eb4415ddcab9e0c1ebec1f7f4c4b4 sssd-dbus-1.15.2-50.el7_4.6.x86_64.rpm 09b4207dd1a398d7381d1ab408282814d60c751847ded31c4890f4d83695ad4f sssd-ipa-1.15.2-50.el7_4.6.x86_64.rpm 51eb23a9fceef69daa424f412876eeec15e0bbd1a2d47a56d8deeffabf61f6e9 sssd-kcm-1.15.2-50.el7_4.6.x86_64.rpm f38b927659b619b9713f60823f4a7f0eecadf5b28ece1cddd9f7286bd602a443 sssd-krb5-1.15.2-50.el7_4.6.x86_64.rpm 3d71793d9c1032abcaba91f4565435589823faf0e909b2177122faca0d0bb02d sssd-krb5-common-1.15.2-50.el7_4.6.x86_64.rpm 2e13acebb255fd4741caff45faaaee7bafef7ba08d13aa8a53466...

....el7_5.5.x86_64.rpm 0f056bfc395c8f20519da99065894a6907fcec5d3ec950977c72248cb5de9613 sssd-dbus-1.16.0-19.el7_5.5.x86_64.rpm cb8b0b675dc47116d27b3dd33131fef634a92648469637052a8106f31c16c027 sssd-ipa-1.16.0-19.el7_5.5.x86_64.rpm ab218051233e8ea64677665799ad07bd5be8c4aed31b1d7fc9b0e51c88ea4eb6 sssd-kcm-1.16.0-19.el7_5.5.x86_64.rpm a2337f3c474709f2253c8a5ee215c5718f5ce29dfa8b1b04caf54642c144fa90 sssd-krb5-1.16.0-19.el7_5.5.x86_64.rpm 10a22f75a9a07ead550140eff3fda42e27d2d777e688786d22214249e0bed6e4 sssd-krb5-common-1.16.0-19.el7_5.5.x86_64.rpm 5b11fee997974ceb689fc09aebed4afb7657bd43c939d682b2e4d...

....el7_5.8.x86_64.rpm 77b54067ff2ef77fef598b340552818bdaa3c79435ffd692b64f0b82f8c1685f sssd-dbus-1.16.0-19.el7_5.8.x86_64.rpm 0d33c0e2ddf0b1f5fabb7d131978f72604ce6440a86a5c01a7c4881bea7d8bfb sssd-ipa-1.16.0-19.el7_5.8.x86_64.rpm aaf8ffa1217b1396056ee903badd3553caa545dd76e0b4fa75f3f062d611fff4 sssd-kcm-1.16.0-19.el7_5.8.x86_64.rpm 1e418c7ac496d6aed59f3ec1bf2dac857b475dd9b5637f49d47c7ff3c620d028 sssd-krb5-1.16.0-19.el7_5.8.x86_64.rpm e41bc0ae1edbcddeadcc768bacb80d51ab6b3333dfe3f481b645a61defb90f3a sssd-krb5-common-1.16.0-19.el7_5.8.x86_64.rpm c0b9aecc4422a16be2d095b79a921cc4f136bfffae10337bec190...

...7_4.11.x86_64.rpm d88b82ca4d050636086a6d4f2ce06c42cebf296c4211fa5e1f5224d59b3e3f79 sssd-dbus-1.15.2-50.el7_4.11.x86_64.rpm e2ec4949acd93a431a57b858a166061c988df83e5a55dfa5ea9f7ece5f2b3bc9 sssd-ipa-1.15.2-50.el7_4.11.x86_64.rpm 97d88cee5b2bbc7bcedb3d72a73303341036218bcfbb8134903b2b95c54ae751 sssd-kcm-1.15.2-50.el7_4.11.x86_64.rpm 0d0bbd6ee8851afce5d2509414eb18157975a8fdd5e184cf8e08f815440f13fe sssd-krb5-1.15.2-50.el7_4.11.x86_64.rpm fe6f91dadf6e0f7fb3e13d5dc176c3f64c0593ddb5e9233b6fb5dee4458da963 sssd-krb5-common-1.15.2-50.el7_4.11.x86_64.rpm 8fc38b912ff3b9caff8d0e395da1b6ec4536af980f17b1a9cc...

....el7_6.8.x86_64.rpm 9f78f3b7e9edcff4c75315cfe8fed4fb401c5e8ff658ec0175c896648e61f5f7 sssd-dbus-1.16.2-13.el7_6.8.x86_64.rpm 4fb3d90364418487cfdc8838b2d360426e79de4327392959c5b5ccaefc427e47 sssd-ipa-1.16.2-13.el7_6.8.x86_64.rpm 3f7ad195f5cc4a9a2bc212760d26d00f7ade88bb0606f6a326e6ac538be775b9 sssd-kcm-1.16.2-13.el7_6.8.x86_64.rpm d1709521a1a63fd011682896ce53b4da37ed1cdec6f5ac28847f30d8e91e60eb sssd-krb5-1.16.2-13.el7_6.8.x86_64.rpm 878ef7e84bc14e3cf8061f002f0e0210e2b191cc96180d35807ef92c76dfecdb sssd-krb5-common-1.16.2-13.el7_6.8.x86_64.rpm 72e0a06c99665507d51cf3a01dcff56eae35707c8953a0f5b40b5...