On 4/22/20 4:39 PM, Orion Poplawski wrote:

Hello -

I'm testing out the KCM kerberos cache on EL 7.8 (sssd-kcm-1.16.4-37.el7_8.1.x86_64) and have found that when I su to another user using a smartcard (entering a PIN) I no longer receive a kerberos ticket.  This worked when I was using the KEYRING cache type. Our users are in AD via a trust.  I do get a ticket when I use my password to authenticate.

Is this a known issue?  I couldn't find any reports.

• Orion

I think I found the appropriate ticket:

https://pagure.io/SSSD/sssd/issue/3903