On Mon, 2009-11-09 at 21:19 +0100, Sumit Bose wrote: 
> 
> Does this mean you are still seeing [Credentials cache I/O operation
> failed XXX] in krb5_child.log?

No.  I am seeing nothing new at all in the krb5_child.log when
authentications happen.

> this indicates that everything is ok, please send krb5_child.log, if
> possible with debug level 10.

Even with debug level 10, there is nothing new in the krb5_child.log:

$ ls -ltar /var/log/sssd/
total 420
-rw-------  1 root root    438 2009-11-09 09:23 krb5_child.log
drwxr-xr-x 15 root root   4096 2009-11-10 07:41 ..
drwxr-xr-x  2 root root   4096 2009-11-10 23:32 .
-rw-------  1 root root 152408 2009-11-10 23:32 sssd_pam.log
-rw-------  1 root root 238167 2009-11-10 23:32 sssd_KRB.log

I have "debug_level = 10" in my [domain/KRB] as well as the [pam]
section.

Also, I asked previously why I would want per-login unique ccache files
with:

krb5_ccname_template = FILE:%d/krb5cc_%U_XXXXXX

but nobody answered.  Do I really want this or is a single ccache file
per user (i.e. drop the _XXXXXX in the template) not more ideal?

b.

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel

Reply via email to