[39615] in Kerberos
Re: krb5ccmachine
daemon@ATHENA.MIT.EDU (=?utf-8?q?Marek_Gre=C5=A1ko_via_Ke)
Mon Apr 27 00:39:14 2026
Date: Mon, 27 Apr 2026 04:38:44 +0000
To: "Christian, Mark" <mark.christian@intel.com>
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Message-ID: <-y-c4c5KAx_sZy5JJOgjg4ztnCM4RurxFAKV-mHiZrmNsG7BpEG2DihwKp5vPzpIus5Gx79JI4X7_RurezUzBunJXIJk1KCI4RUBIp2yujc=@protonmail.com>
In-Reply-To: <b364323c7b5350d9bef1dd767a8bb4476171219b.camel@intel.com>
MIME-Version: 1.0
From: =?utf-8?q?Marek_Gre=C5=A1ko_via_Kerberos?= <kerberos@mit.edu>
Reply-To: =?utf-8?Q?Marek_Gre=C5=A1ko?= <marek.gresko@protonmail.com>
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Hello,
the
kinit -c /tmp/krb5ccmachine_EXAMPLE.COM
asks for password. Which password? What should I expect thereafter to happen?
I also asked AI to help me on the original issue. It thinks it is related to gssproxy and most probably it is right. It stated there is not nuch to do and I should accept the current state. But I feel a little bit unhappy, since it creates file with predictable name in the /tmp and it could be a security risk.
Thanks
Marek
Odoslané pomocou bezpečného emailu Proton Mail.
piatok 24. apríla 2026, 16:02, Christian, Mark <mark.christian@intel.com> napísal/a:
> On Fri, 2026-04-24 at 10:44 +0000, Marek Greško via Kerberos wrote:
> > Hello,
> >
> > I have configured kerberos client on Fedora 43. I configured kerberos
> > to use KCM: ccache. Users ccaches are in KCM, but I always see the
> > file /tmp/krb5ccmachine_EXAMPLE.COM created. Why is this file
> > created?
>
> Perhaps related to your kerberos NFS configuration? Inspect the cache,
> kinit -c /tmp/krb5ccmachine_EXAMPLE.COM, doing so might clue you in.
>
> Mark
>
> > What mechanism does not use KCM and how could it be convinced to do
> > so?
> >
> > Thanks
> >
> > Marek
> > ________________________________________________
> > Kerberos mailing list Kerberos@mit.edu
> > https://mailman.mit.edu/mailman/listinfo/kerberos
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
