[Bug 3203] Could default_ccache_name from krb5.conf be used for GSSAPI connections?

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Aug 27 19:37:41 AEST 2020


https://bugzilla.mindrot.org/show_bug.cgi?id=3203

--- Comment #2 from Toby Blake <toby at inf.ed.ac.uk> ---
(In reply to Jakub Jelen from comment #1)
> We use several patches to do that in RHEL/Fedora and this was
> already proposed in bug #2775, but without any feedback from OpenSSH
> developers.
> 
> Feel free to use the patches we use (might need updating from
> version posted in the bug). But note that there is still many people
> interested in using per-session caches.

Hi Jakub,

Thanks for the reply.  I've tried a (slightly reworked to get it to
apply) version of openssh-7.7p1-gssapi-new-unique.patch but it doesn't
seem to quite do what I want it to do, specifically it always gives me
a new unique ccache, rather than using e.g. KEYRING:persistent:%{uid}. 
It may be that in reworking it I've messed it up somewhat so I need to
find some time to look at it in more detail.

Cheers
Toby

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list