On Mon, 12 Dec 2016 10:53:39 +0100 Vít Ondruch <vondruch@xxxxxxxxxx> wrote: > So several questions: > > 1) When I have 2 domains I login to with kerberos, how to really make > it work. I don't want to kswitch all the time. I am using Kerberos to > authenticate my email client, so I want to keep it working all the > time. Fedora should work just fine with other domains. It doesn't need to be the primary. > 2) I needed to update a certificate every 6 months, now I need to > kinit every day. This is regression. How to make it work without > kinit at all. I am using SSSD for company kerberos and I don't need > to kinit at all, how to make this work for Fedora? I really wish people would stop using that word. https://ohjeezlinux.wordpress.com/2013/01/03/new-rule-about-regressions/ Anyhow, this is just a change in behavior that you don't like. First, I'll note you don't need to get a new ticket every day, you can just renew with 'kinit -R'. I am not sure what env kinit needs, but you may even be able to do this from a cron job. That will work for 1 week. As sgallagh noted downthread, gnome online accounts will hopefully handle this for you soon as soon as that one bug is fixed. Finally, I'll note that these tickets are more powerfull than the old certs. The certs controlled authentication to just koji and uploads, while tickets allow you to login to almost all our web apps as well. kevin
Attachment:
pgp2FVjbPzrud.pgp
Description: OpenPGP digital signature
_______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
