[X2Go-Dev] Bug#1546: Feature-request: Customizable kerberos ticket cache location

Florian Oppermann florian.oppermann at itp.uni-hannover.de
Wed May 12 09:20:03 CEST 2021


Package: x2goclient
Version: 4.1.2.2

Current situation: Authentication via kerberos puts the credential cache 
into $HOME/.x2go/C-$sessionId/krb5cc. In our system this is problematic 
as access to $HOME requires a valid kerberos ticket, i.e. once the 
ticket expires it can’t be renewed from within the X2Go session because 
access to the ticket cache is denied. For normal logins, the krb5cc is 
located at /tmp which prevents this problem. I’d appreciate an option to 
set the location where to put the ticket cache.

I believe the current behaviour comes from src/onmainwindow.cpp:7332 
where the location is more or less hard-coded. My suggestion would be to 
add either a configuration option in the GUI or at least a command line 
switch to change this location. I’m not familiar enough with the code to 
provide a patch but I think it should be not too difficult.

Thanks for all your great work! :-)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5400 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.x2go.org/pipermail/x2go-dev/attachments/20210512/a9fe2c97/attachment.bin>


More information about the x2go-dev mailing list