[32877] in Kerberos
Re: Static ticket cache name
daemon@ATHENA.MIT.EDU (Techie)
Wed Nov 10 17:17:51 2010
MIME-Version: 1.0
In-Reply-To: <87hbfoomje.fsf@windlord.stanford.edu>
Date: Wed, 10 Nov 2010 15:17:39 -0700
Message-ID: <AANLkTineDf2UR9=cbJJkmDwqiODUrZkJLcFc2-QyD=VX@mail.gmail.com>
From: Techie <techchavez@gmail.com>
To: Russ Allbery <rra@stanford.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Hi Russ,
Yes I am using yours actually, it comes with Debian.
I tried this in the session and auth pam stacks.
pam_krb5.so ccache=file:/tmp/krb5cc_2345
Is this syntax incorrect? I can't find an example using syntax.
Thank you
On Wed, Nov 10, 2010 at 3:12 PM, Russ Allbery <rra@stanford.edu> wrote:> Techie <techchavez@gmail.com> writes:>>> Hello is it possible to set a static credential cache name? For>> example force the use of krb5cc_12334.>> This is not recommended because it's a potential security issue unless> you're using a non-world-writable directory in which to store your ticket> caches.>>> I have a situation where there will only be one user on a box at a time>> and I want to use a static credential cache name. I tried using pam_krb5>> but it is not working. I also tried setting KRB5CCNAME and>> PAM_KRB5_CCNAME but no success. It may be that this is impossible but>> figure I would ask.>> What pam_krb5 module are you using? Mine has always supported this. See> the ccache and ccache_dir configuration parameters.>> --> Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>>
________________________________________________Kerberos mailing list Kerberos@mit.eduhttps://mailman.mit.edu/mailman/listinfo/kerberos
