Ticket #1000 (closed enhancement: wontfix)

Opened 5 years ago

Last modified 5 years ago

Add a Kerberos provider option to set krb5_get_init_creds_opt_set_proxiable

Reported by: jhrozek Owned by: somebody
Priority: minor Milestone: SSSD Kerberos Improvements Feature
Component: SSSD Version: 1.6.1
Keywords: Cc: nalin
Blocked By: Blocking:
Sensitive: Tests Updated: no
Coverity Bug: Patch Submitted: no
Red Hat Bugzilla: 0 Design link:
Feature Milestone:
Design review: Fedora test page:
Chosen: Candidate to push out:
Release Notes:
Temp mark:


This would be analogous to kinit's -p: request proxiable tickets.

Change History

comment:1 Changed 5 years ago by dpal

  • Priority changed from major to minor
  • Milestone changed from NEEDS_TRIAGE to SSSD 1.8.0

comment:2 Changed 5 years ago by dpal

  • Type changed from defect to enhancement

comment:3 Changed 5 years ago by dpal

  • Milestone changed from SSSD 1.8.0 to SSSD 1.9.0

comment:4 Changed 5 years ago by dpal

comment:5 Changed 5 years ago by dpal

  • Milestone changed from SSSD 1.9.0 to SSSD Kerberos improvements

comment:6 Changed 5 years ago by dpal

  • Red Hat Bugzilla set to 0

comment:7 Changed 5 years ago by nalin

  • Cc nalin added
  • Resolution set to wontfix
  • Status changed from new to closed
  • proposed_priority set to Undefined

I've spent some more time thinking about this. While it's an easy knob to provide, and I initially was in favor of it, I can't come up with any scenarios where I'd want to explicitly set SSSD's behavior to be different from the rest of the system, which heeds the default value for this setting as set (or not) in /etc/krb5.conf. It's less work for the administrator to just have to change it once, in /etc/krb5.conf, so I'm going to mark this as won't-fix.

Note: See TracTickets for help on using tickets.