>>>>> "Karl" == Karl O Pinc <[email protected]> writes:
Karl> On Mon, 20 Mar 2023 09:27:39 -0300
Karl> Andreas Hasenack <[email protected]> wrote:
>> The extra randomness suffix happens when you login via
>> ssh/gssapi.
Karl> That is exactly how I'm logging in, authenticating credentials
Karl> with MS Active Directory, with configuration set in
Karl> /etc/sssd/sssd.conf and /etc/krb5.conf -- after joining with
Karl> the "realm" command.
pam_sssd always adds randomness to the cache name.
So, this is not an issue with krb5; pam_sssd is explicitly setting
KRB5CCNAME environment variable.