Kerberos ccache in /tmp, why not kernel keyring?

[Andreas Hasenack]

Hi,

any idea why debian and ubuntu do not use the kernel keyring as the
default storage for the kerberos credentials cache? We still use files
in /tmp, like /tmp/krb5cc_1000 for a user with uid 1000.

Is it because of heimdal compatibility? Its keyring support was merged
in 2018[1], but doesn't seem to be in a release yet.


1. https://github.com/heimdal/heimdal/issues/166,
https://github.com/heimdal/heimdal/commit/fb81598d447305352cd38095ffac701cc3eed0cf