Ticket #1000 (closed enhancement: wontfix)

Opened 4 years ago

Last modified 3 years ago

Add a Kerberos provider option to set krb5_get_init_creds_opt_set_proxiable

Reported by: jhrozek Owned by: somebody
Priority: minor Milestone: SSSD Kerberos Improvements Feature
Component: SSSD Version: 1.6.1
Keywords: Cc: nalin
Blocked By: Blocking:
Tests Updated: no Coverity Bug:
Patch Submitted: no Red Hat Bugzilla: 0
Design link:
Feature Milestone:
Design review: Fedora test page:
Chosen: Candidate to push out:
Release Notes:
Temp mark:

Description

This would be analogous to kinit's -p: request proxiable tickets.

Change History

comment:1 Changed 4 years ago by dpal

  • Milestone changed from NEEDS_TRIAGE to SSSD 1.8.0
  • Priority changed from major to minor

comment:2 Changed 3 years ago by dpal

  • Type changed from defect to enhancement

comment:3 Changed 3 years ago by dpal

  • Milestone changed from SSSD 1.8.0 to SSSD 1.9.0

comment:4 Changed 3 years ago by dpal

comment:5 Changed 3 years ago by dpal

  • Milestone changed from SSSD 1.9.0 to SSSD Kerberos improvements

comment:6 Changed 3 years ago by dpal

  • Red Hat Bugzilla set to 0

comment:7 Changed 3 years ago by nalin

  • Status changed from new to closed
  • proposed_priority set to Undefined
  • Resolution set to wontfix
  • Cc nalin added

I've spent some more time thinking about this. While it's an easy knob to provide, and I initially was in favor of it, I can't come up with any scenarios where I'd want to explicitly set SSSD's behavior to be different from the rest of the system, which heeds the default value for this setting as set (or not) in /etc/krb5.conf. It's less work for the administrator to just have to change it once, in /etc/krb5.conf, so I'm going to mark this as won't-fix.

Note: See TracTickets for help on using tickets.