[Bug 1336663] Re: lightdm uses wrong ccache name on pam_krb5 credentials refresh

[Sergio Gelato]

I'm not aware of any activity on this since Robert Ancell's comment #4
indicating that a proper fix might require extensive refactoring (too
extensive for Ubuntu T?). As a workaround I've added an Upstart
configuration file to run krenew in every user's session; it's as simple
as

start on xsession
stop on desktop-end
respawn
exec /usr/bin/krenew -K 60

(One may need to add a -t flag if AFS token renewal is desired.)
Lightdm still refreshes the wrong ccache but krenew independently takes care of the right one.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to libpam-krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/1336663

Title:
  lightdm uses wrong ccache name on pam_krb5 credentials refresh

Status in Light Display Manager:
  Triaged
Status in libpam-krb5 package in Ubuntu:
  Confirmed
Status in lightdm package in Ubuntu:
  Triaged

Bug description:
  As already noted by Brian Knoll in https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1296276/comments/24
  lightdm 1.10.1-0ubuntu1 uses an inappropriate credentials cache, /tmp/krb5cc_0, when refreshing Kerberos credentials on screen unlock.

  I couldn't find the new bug Robert Ancell called for in
  https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1296276/comments/27
  so I'm opening one now.

To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/1336663/+subscriptions