Daniel unbrot Pätzold f59ba70bb9 sync_client_software: patch sssd.conf to add krb5_validate = False ...

SSSD >= 2.10.1 no longer raises CAP_DAC_READ_SEARCH to effective in
offline mode, so validate_tgt fails with EACCES reading /etc/krb5.keytab
before the cached-credential fallback is reached. Adding krb5_validate =
False disables the keytab validation step and restores reliable offline
authentication for FreeIPA domain users.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-07 12:26:07 +02:00

..

config.dist

inc.sh: use BASH_SOURCE for path resolution; add --missingconfok; fix install.sh sourcing and git pull logic

2026-05-03 18:42:12 +02:00

skel

Relocate dist files, fix path references, and misc script improvements

2026-05-03 13:28:44 +02:00

configure.sh

confige: source dists defaults to for robustnes

2026-05-06 09:06:30 +02:00

create_nc_package_from_sys_config.sh

Different behaviour of "sudo -l" checks

2026-03-16 11:53:31 +01:00

install.sh

install: if config was found with other repourl as the user specified, use users repourl for configure call

2026-05-06 08:07:31 +02:00

logon_script.sh

small changes in output

2026-05-03 20:39:56 +02:00

mount_ecrypt_home.sh

mount_ecrypt_home.sh: store vault key in XDG_RUNTIME_DIR instead of /var/tmp

2026-05-01 16:38:24 +02:00

mozilla_starter.sh

Different behaviour of "sudo -l" checks

2026-03-16 11:53:31 +01:00

setup_skel.sh

Relocate dist files, fix path references, and misc script improvements

2026-05-03 13:28:44 +02:00

setup_system_full.sh

setup system: add compression to mount

2026-05-01 17:53:08 +02:00

setup_system.inc.sh

small changes in output

2026-05-03 20:39:56 +02:00

sync_client_software.sh

sync_client_software: patch sssd.conf to add krb5_validate = False

2026-05-07 12:26:07 +02:00