#856 Automatic TGT renewal overwrites cached password
Closed: Fixed Opened by sgallagh.

When the internal ticket renewal process runs, it has the Kerberos credential cache saved into the 'authtok' member attribute of the PAM data. So after it successfully renews the ticket, we're saving this value to the cache.

We need to skip updating the cached password if it's happening during automatic ticket renewal.


Fields changed

description: When the internal ticket renewal process runs,
it has the Kerberos credential cache saved into the 'authtok' member attribute
of the PAM data. So after it successfully renews the ticket, we're saving this
value to the cache.

We need to skip updating the cached password if it's happening during automatic
ticket renewal. => When the internal ticket renewal process runs, it has the Kerberos credential cache saved into the 'authtok' member attribute of the PAM data. So after it successfully renews the ticket, we're saving this value to the cache.

We need to skip updating the cached password if it's happening during automatic ticket renewal.
patch: 0 => 1
status: new => assigned

Fixed by:

master:
- fffdae81651b460f3d2c119c56d5caa09b4de42a
- 08c427fc3cdec58b670de02a6c39d2ec4d753050

sssd-1-5:
- da03c0178fb9efb545372557cb0e02ebfdd8e05b
- 0b2e441bbd9d19ae40b7586b8159c6aef0a6cfb0

resolution: => fixed
status: assigned => closed

Fields changed

rhbz: => 0

Metadata Update from @sgallagh:
- Issue assigned to sgallagh
- Issue set to the milestone: SSSD 1.5.7

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1898

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata