[SSSD] Re: Changes to default ccache in krb5.conf

2017-06-01 Thread Simo Sorce
On Wed, 2017-05-31 at 10:59 +0200, Jakub Hrozek wrote: > On Wed, May 31, 2017 at 10:31:38AM +0200, Lukas Slebodnik wrote: > > ehlo, > > > > I had a discussion with QEs and realized that sssd need to be > > restarted > > if default_ccache_name is changed in krb5 configuration files. > > > > The

[SSSD] Re: Changes to default ccache in krb5.conf

2017-05-31 Thread Jakub Hrozek
On Wed, May 31, 2017 at 02:21:42PM +0200, Lukas Slebodnik wrote: > On (31/05/17 10:59), Jakub Hrozek wrote: > >We could do one thing that Simo proposed some time ago which is to not > >cache the KRB5CCNAME at all if it only contains 'predictable' > >components. > > > >For example, KEYRING:$uid or

[SSSD] Re: Changes to default ccache in krb5.conf

2017-05-31 Thread Lukas Slebodnik
On (31/05/17 10:59), Jakub Hrozek wrote: >We could do one thing that Simo proposed some time ago which is to not >cache the KRB5CCNAME at all if it only contains 'predictable' >components. > >For example, KEYRING:$uid or KCM: don't need to be cached at all. >FILE:krb5ccname_X does. That would

[SSSD] Re: Changes to default ccache in krb5.conf

2017-05-31 Thread Sumit Bose
On Wed, May 31, 2017 at 10:31:38AM +0200, Lukas Slebodnik wrote: > ehlo, > > I had a discussion with QEs and realized that sssd need to be restarted > if default_ccache_name is changed in krb5 configuration files. > > The reason is that we cache the value but do not refresh it. >

[SSSD] Re: Changes to default ccache in krb5.conf

2017-05-31 Thread Jakub Hrozek
On Wed, May 31, 2017 at 10:31:38AM +0200, Lukas Slebodnik wrote: > ehlo, > > I had a discussion with QEs and realized that sssd need to be restarted > if default_ccache_name is changed in krb5 configuration files. > > The reason is that we cache the value but do not refresh it. >