Do you support "GssapiCredStore ccache:KCM:"

[elijahgagne]

It seems that RHEL and other providers are defaulting to KCM (Kernel Credential Manager). I haven't been able to get

GssapiCredStore ccache:KCM:

working yet and I don't see a documented example of it so I figured I'd ask if it's supported.

Thanks!
-EWG

[simo5]

KCM is Kerberos Credential Manager, not "Kernel". and its availability depends on having a KCM daemon running on the system as well as support on the GSSAPI library used.

Fundamentally it is completely transparent to mod_auth_gssapi what credential caching system is used, if the library supports it then it should work.

Of course access to the KCM needs to be available for the user the web server is running as, if chrooting or namespacing is used, then a bind mount for the KCM socket needs to be added to the startup scripts etc...

[elijahgagne]

Thanks, I'll keep trying.