On 4/22/20 4:39 PM, Orion Poplawski wrote:
Hello -
I'm testing out the KCM kerberos cache on EL 7.8
(sssd-kcm-1.16.4-37.el7_8.1.x86_64) and have found that when I su to
another user using a smartcard (entering a PIN) I no longer receive a
kerberos ticket. This worked when I was using the KEYRING cache type.
Our users are in AD via a trust. I do get a ticket when I use my
password to authenticate.
Is this a known issue? I couldn't find any reports.
- Orion
I think I found the appropriate ticket:
https://pagure.io/SSSD/sssd/issue/3903
--
Orion Poplawski
Manager of NWRA Technical Systems 720-772-5637
NWRA, Boulder/CoRA Office FAX: 303-415-9702
3380 Mitchell Lane orion(a)nwra.com
Boulder, CO 80301
https://www.nwra.com/