← Back to team overview

touch-packages team mailing list archive

[Bug 740477] Re: kinit should print an error if credentials cache has invalid permissions

 

** Tags removed: glucid

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/740477

Title:
  kinit should print an error if credentials cache has invalid
  permissions

Status in krb5 package in Ubuntu:
  Confirmed

Bug description:
  Binary package hint: krb5-user

  The obvious use case is a user does something silly such as:

  sudo kinit -p <principal> and promptly makes a root:root ccache file
  for the specified principal.

  Then the user later tries to kinit as that user and in fact everything
  *looks* fine...the kinit doesn't print any errors and returns 0.
  However the truth is nothing was done because the ccache is the wrong
  permissions.

  klist prints an error well enough:

  
  klist: Credentials cache permissions incorrect while setting cache flags (ticket cache FILE:/var/run/ccache/krb5cc_45531_DIPCWB)

  -A

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/740477/+subscriptions