[PATCHSET] add support for DIR: based credential caches

Jeremy Allison jra at samba.org
Tue Jul 23 16:31:44 MDT 2013


On Tue, Jul 23, 2013 at 08:50:17AM +0200, Andreas Schneider wrote:
> On Monday 22 July 2013 12:57:00 Jeremy Allison wrote:
> > On Mon, Jul 22, 2013 at 02:03:44PM +0200, Guenther Deschner wrote:
> > > Hi,
> > > 
> > > attached find some patches to add support for DIR: based krb5 credential
> > > caches in kerberized pam_winbind logons. The pam_winbind.conf
> > > configuration file now also allows to define custom patterns for DIR:
> > > and FILE: paths including numeric uid substitution using "%u".
> > 
> > This:
> > > +             if (strequal(type, "DIR")) {
> > > +                     gen_cc = talloc_asprintf(
> > > +                             mem_ctx, "DIR:/run/user/%d/krb5cc", uid);
> > > +             }
> > 
> > Looks rather Linux-only'ish :-).
> > 
> > Is there an alternative/parameterization for other systems ?
> 
> This is the default from krb5. If you prefer another path, then set it with:
> 
> krb5_cc_type = DIR:/path/to/%u/krb5cc

Ok, no problem then.


More information about the samba-technical mailing list