gssapi / gssapi/gssproxy

lifetime of credentials

Open
#33 11 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
C
Stars
54
Forks
32
Avg merge
3d 2h
Merged PRs (30d)
2

Description

It seems gssproxy doesn't expose lifetime of credentials or doesn't do it properly.

In IPA env(WSGI, GSS_USE_PROXY=yes) I inquire the lifetime of creds as:
```
store = {'ccache': '/run/ipa/ccaches/xxx'}
creds = gssapi.Credentials(usage="initiate", name=None, store=store)
print(creds.lifetime)
```
which always show the initial lifetime of credentials (in my example it was always 20) even the credentials are expired.

While the decrypted ccache
```python
import gssapi

store = {'ccache': '/root/decryptedccache'}
creds = gssapi.Credentials(usage="initiate", name=None, store=store)
print(creds.lifetime)
```
shows the correct remaining lifetime of creds and raises with `ExpiredCredentialsError` on expiration.

Is such proxied lifetime's behaviour expected, bug or not implemented yet?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.