Bug 7605 - Kerberos TGTs aren't refreshed/recreated on reconnect
Summary: Kerberos TGTs aren't refreshed/recreated on reconnect
Status: NEW
Alias: None
Product: ThinLinc
Classification: Unclassified
Component: Other (show other bugs)
Version: trunk
Hardware: PC Unknown
: P2 Normal
Target Milestone: MediumPrio
Assignee: Bugzilla mail exporter
URL:
Keywords:
Depends on: 2466
Blocks:
  Show dependency treegraph
 
Reported: 2020-12-09 09:32 CET by Pierre Ossman
Modified: 2021-06-30 09:21 CEST (History)
0 users

See Also:
Acceptance Criteria:


Attachments

Description Pierre Ossman cendio 2020-12-09 09:32:38 CET
If you use ThinLinc on a Kerberos capable system then the user will get a TGT as part of the session creation (assuming a password was available for SSO). However this TGT will eventually expire and become useless. At this point many things might break for the user.

The responsibility of refreshing this ticket lies at least partially with ThinLinc as with a local login unlocking the screensaver would yield a fresh TGT for the user. Since the screen saver is generally not used with ThinLinc, instead replaced with a idle timer and reconnect, the normal mechanism doesn't work.

Note You need to log in before you can comment on or make changes to this bug.