Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-4943

[RFE] Add option to create unique credential caches on the disk in /etc/krb5.conf

    • Icon: Story Story
    • Resolution: Won't Do
    • Icon: Undefined Undefined
    • None
    • rhel-8.6.0
    • krb5
    • sst_idm_ipa
    • ssg_idm
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • If docs needed, set a value
    • None

      1. Proposed title of this feature request

      Add option to create unique credential caches on the disk in /etc/krb5.conf

      3. What is the nature and description of the request?

      On VAS/QAS, their implementation of Kerberos allows unique identifiers at the end of the credential cache file:

      Ticket cache: FILE:/tmp/krb5cc_4132744_aqzIRXKmQr

      vs.

      Ticket cache: FILE:/tmp/krb5cc_4132744

      The customer would like to see similar behavior with RHEL.

      4. Why does the customer need this? (List the business requirements here)

      The customer has multiple programs logging into a shell account and doesn't want the ticket renewed each time, they want one persistent ticket per session.

      5. How would the customer like to achieve this? (List the functional requirements here)

      They would like a unique string/identifier added to the end of each credential cache file.

      6. For each functional requirement listed, specify how Red Hat and the customer can test to confirm the requirement is successfully implemented.

      This can be tested with klist.

      7. Is there already an existing RFE upstream or in Red Hat Bugzilla?

      No.

      8. Does the customer have any specific timeline dependencies and which release would they like to target (i.e. RHEL8, RHEL9)?

      No.

      9. Is the sales team involved in this request and do they have any additional input?

      No.

      10. List any affected packages or components.

      krb5-workstation-1.15.1-37.el7_6.x86_64

      11. Would the customer be able to assist in testing this functionality if implemented?

      Yes.

            jrische@redhat.com Julien Rische
            rhn-support-ccallaha Chance Callahan
            Julien Rische Julien Rische
            Michal Polovka Michal Polovka
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: