Bug 805917

Summary:	[RFE] Support DIR: credential caches for multiple TGT support
Product:	Red Hat Enterprise Linux 7	Reporter:	Dmitri Pal <dpal>
Component:	sssd	Assignee:	Jakub Hrozek <jhrozek>
Status:	CLOSED WONTFIX	QA Contact:	Kaushik Banerjee <kbanerje>
Severity:	unspecified	Docs Contact:
Priority:	medium
Version:	7.0	CC:	jgalipea
Target Milestone:	rc	Keywords:	FutureFeature
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	sssd-1.10.0-1.el7.alpha1	Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-09-19 17:37:51 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Dmitri Pal 2012-03-22 12:57:52 UTC

This bug is created as a clone of upstream ticket:
https://fedorahosted.org/sssd/ticket/974

MIT dev team is working on the new type of the credential cache to support the case when one user has multiple tickets for different Kerberos realms. This is a feature of Kerberos 1.10. We need to take advantage of this functionality as soon as it becomes available.

http://k5wiki.kerberos.org/wiki/Projects/Client_principal_selection

Comment 2 Jakub Hrozek 2013-03-26 18:02:57 UTC

Fixed upstream.

Comment 3 Dmitri Pal 2013-09-19 17:37:51 UTC

We decided to use kernel based credential cache to avoid race conditions. This is not a feature we pursue any more.

Comment 4 Jakub Hrozek 2013-09-20 09:36:59 UTC

Just for the record, the DIR feature is present in the source, just not compiled in (and tested etc)