On 4/22/20 4:39 PM, Orion Poplawski wrote:
Hello -
I'm testing out the KCM kerberos cache on EL 7.8 (sssd-kcm-1.16.4-37.el7_8.1.x86_64) and have found that when I su to another user using a smartcard (entering a PIN) I no longer receive a kerberos ticket. This worked when I was using the KEYRING cache type. Our users are in AD via a trust. I do get a ticket when I use my password to authenticate.
Is this a known issue? I couldn't find any reports.
- Orion
I think I found the appropriate ticket:
https://pagure.io/SSSD/sssd/issue/3903
sssd-users@lists.fedorahosted.org