SSSD changes primary creds on authentication

[sssd-bot]

Cloned from Pagure issue: https://pagure.io/SSSD/sssd/issue/1866

• Created at 2013-04-04 05:05:20 by simo
• Closed as Fixed
• Assigned to nobody

---

When using the DIR: credential cache type any authentication through SSSD will switch the default primary credentials in use.
When using 2 sets of credentials this causes a switch of primary crdentials on screen unlock for example.

We may want to consider not switching by default if another primary credential is present (or switching back after we poppulate the ccache with fresh credentials). Maybe conrolled by an option.

Comments

---

Comment from dpal at 2013-04-04 15:31:39

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.11 beta
rhbz: => todo

---

Comment from dpal at 2013-07-30 11:03:06

This might have been addressed by other ticket #1936. Test and close if this is the case. Otherwise re-triage.

changelog: =>
milestone: SSSD 1.13 beta => Interim Bucket

---

Comment from lslebodn at 2013-07-30 11:20:17

It should be fixed by commit d673bd3

---

Comment from dpal at 2013-07-30 12:54:43

Fields changed

milestone: Interim Bucket => SSSD 1.12 beta

---

Comment from lslebodn at 2013-12-03 08:44:59

krb5_child was rewritten in the branch 1.11 a6a0d4e

I tested with DIR and KEYRING ccache
krb5_ccname_template = DIR:/tmp/user/%U/ccache_%p
krb5_ccname_template = KEYRING:persistent:%U

Primary credentials was not changed on the second parallel authentication.

resolution: => fixed
status: new => closed

---

Comment from jhrozek at 2014-07-03 11:10:37

Fields changed

rhbz: todo => 0

---

Comment from simo at 2017-02-24 14:56:37

Metadata Update from @Simo:

• Issue set to the milestone: SSSD 1.12 beta