Package: libpam-heimdal Version: 4.7-4 Severity: normal The libpam-krb5 package has a couple issues when trying to configure credential cache files:
1) The documentation claims you can set the credential cache filename in krb5.conf, but this appears to be a lie. If you don't give the pam ccache= option, then it uses a hard coded string to form the cache filename, disregarding any settings in krb5.conf. 2) Because /usr/share/pam-configs/krb5 is not a conffile, there's no way to edit the pam settings without risking them getting clobbered on a package update, other than by disabling the module in the system level config and then adding it back in by hand, which is a bit of a pain in the tuchus. Background: I want to change this so that cifs.upcall can find the user's credential cache, which seems to require that to be in a predictable location like pam_winbind creates (/tmp/krb5cc_UID). -- System Information: Debian Release: 9.1 APT prefers stable APT policy: (990, 'stable'), (500, 'unstable-debug'), (500, 'stable-debug'), (500, 'unstable'), (500, 'testing'), (1, 'experimental-debug'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-3-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages libpam-heimdal depends on: ii krb5-config 2.6 ii libc6 2.24-11+deb9u1 ii libkrb5-26-heimdal 7.1.0+dfsg-13+deb9u1 ii libpam-runtime 1.1.8-3.6 ii libpam0g 1.1.8-3.6 libpam-heimdal recommends no packages. libpam-heimdal suggests no packages. -- no debconf information
