SSSD / sssd

#3683 List of ticket caches in klist -A keeps growing
Closed: wontfix by pbrezina. Opened by rishi.

Closed: wontfix
Reopen Issue

I added my FEDORAPROJECT.ORG and REDHAT.COM principals through the GNOME Online Accounts UI on Fedora 27, probably used kswitch -p to ensure that the credentials cache for REDHAT.COM is set as default, rebooted the machine, and after an hour or so:

[rishi@kolache ~]$ klist -A
Ticket cache: KCM:1000:15237
Default principal: dray@REDHAT.COM
Valid starting       Expires              Service principal
2018-03-19T17:41:13  2018-03-20T03:33:35  HTTP/errata-web-01.host.prod.eng.bos.redhat.com@
    renew until 2018-03-20T17:33:34
2018-03-19T17:33:35  2018-03-20T03:33:35  krbtgt/REDHAT.COM@REDHAT.COM
    renew until 2018-03-20T17:33:34
2018-03-19T17:41:13  2018-03-20T03:33:35  HTTP/errata-web-01.host.prod.eng.bos.redhat.com@REDHAT.COM
    renew until 2018-03-20T17:33:34
Ticket cache: KCM:1000:9617
Default principal: rishi@FEDORAPROJECT.ORG
Valid starting       Expires              Service principal
2018-03-19T17:48:45  2018-03-20T17:48:42  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG
Ticket cache: KCM:1000:35605
Default principal: rishi@FEDORAPROJECT.ORG
Valid starting       Expires              Service principal
2018-03-19T17:33:39  2018-03-20T17:33:36  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG
Ticket cache: KCM:1000:97797
Default principal: rishi@FEDORAPROJECT.ORG
Valid starting       Expires              Service principal
2018-03-19T18:03:47  2018-03-20T18:03:45  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG
Ticket cache: KCM:1000
Default principal: rishi@FEDORAPROJECT.ORG
Valid starting       Expires              Service principal
2018-03-19T17:18:39  2018-03-20T17:18:35  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG
Ticket cache: KCM:1000:33382
Default principal: rishi@FEDORAPROJECT.ORG
Valid starting       Expires              Service principal
2018-03-19T18:18:54  2018-03-20T18:18:51  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG
Ticket cache: KCM:1000:77222
Default principal: rishi@FEDORAPROJECT.ORG
Valid starting       Expires              Service principal
2018-03-19T18:33:58  2018-03-20T18:33:55  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG

I definitely didn't add the FEDORAPROJECT.ORG principal multiple times - neither through kinit nor through GOA.

I have:

krb5-libs-1.15.2-7.fc27.x86_64
gnome-online-accounts-3.26.2-1.fc27.x86_64
sssd-debuginfo-1.16.0-8.fc27.x86_64
sssd-1.16.1-1.fc27.x86_64
sssd-client-1.16.1-1.fc27.x86_64
sssd-krb5-1.16.1-1.fc27.x86_64
sssd-kcm-debuginfo-1.16.0-8.fc27.x86_64
sssd-common-pac-1.16.1-1.fc27.x86_64
sssd-kcm-1.16.1-1.fc27.x86_64
sssd-ad-1.16.1-1.fc27.x86_64
sssd-debugsource-1.16.0-8.fc27.x86_64
sssd-proxy-1.16.1-1.fc27.x86_64
sssd-common-1.16.1-1.fc27.x86_64
sssd-ipa-1.16.1-1.fc27.x86_64
sssd-krb5-common-1.16.1-1.fc27.x86_64
sssd-nfs-idmap-1.16.0-8.fc27.x86_64
sssd-ldap-1.16.1-1.fc27.x86_64

Metadata Update from @fidencio:
- Issue assigned to fidencio

Metadata Update from @fidencio:
- Assignee reset

Metadata Update from @pbrezina:
- Issue tagged with: Canditate to close

Thank you for taking time to submit this request for SSSD. Unfortunately this issue was not given priority and the team lacks the capacity to work on it at this time.

Given that we are unable to fulfill this request I am closing the issue as wontfix.

If the issue still persist on recent SSSD you can request re-consideration of this decision by reopening this issue. Please provide additional technical details about its importance to you.

Thank you for understanding.

Metadata Update from @pbrezina:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4702

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None

Candidate to close

None
None
High
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.