+++ This bug was initially created as a clone of Bug #1956388 +++
libkrb5 now supports KCM_OP_GET_CRED_LIST when talking with sssd-kcm to improve performance. Please include it in 8.5.
> * https://github.com/krb5/krb5/commit/06afae820a44c1dc96ad88a0b16c3e50bc938b2a
I don't plan to include this. It papers around an SSSD bug - returning the wrong code - and I would prefer SSSD fix it. (You indicated intent to do so in https://github.com/krb5/krb5/pull/1177#issuecomment-810900921 .)
> * https://github.com/krb5/krb5/commit/81bdb47d8ded390263d8ee48f71d5c312b4f1736
This one should be fine to include.
I would like to wait a few days and grab the RETRIEVE logic as well. However, that will expose another issue with SSSD return codes ( https://github.com/SSSD/sssd/pull/5629 ) so if that's not also backported, I will hold off on doing so.
Please let me know if there are any problems with this plan.