Red Hat Bugzilla – Bug 149724
Screen should have support for Kerberos
Last modified: 2007-11-30 17:11:00 EST
I have two problems when using Kerberos and screen:
1. If one logs in with Kerberos support and thereby gets tickets and
then starts a screen, that screen session will use the same credential
cache. If one then detaches the screen and logs out, the login program
will remove the credential cache, and the processes running in the
detached screen will be ticket-less.
2. If one starts a screen, detaches it and lets it lie for some time,
the tickets will expire if one doesn't log in once in a while and
renews them manually.
Therefore, I've written a patch for screen that fixes these problems.
I've mailed it to the screen project mailing list, but considering
that the frequency of screen releases doesn't seem sky-high, it would
be nice to see this get into FC4, so that I won't have to rebuild
screen on the computers that I'll install it on.
Created attachment 111434 [details]
Patch to add Kerberos support to screen.
This patch adds Kerberos support to screen 4.0.2. It makes a copy of the
credential cache when screen starts, and renews tickets every once in a while
(providing, of course, that the tickets are renewable).
It doesn't update configure, so autoconf will have to be run after this patch
is applied for everything to work as it should.
Note also that configure has to be run with --with-krb5, since no
auto-detection is done.
I appreciate the patch, however, i think i will have to wait for the upstream
to adopt the patch, especially this late in release cycle, i alone cannot
reasonably test the patch for inclusion... I'll put the bug on hold and
reconsider after FC4 is out, if it's not included upstream by the time. Please
notify me in that case, if you want to be sure i don't forget, thanks.
I believe that you should send your patch to upstream and he decide about
including this patch. If they adopt it I use it in the next release of screens