PAM_REINITIALIZE_CRED creates a cred cache with the wrong uid in Kerberos. Changing resetcred to be of int type lets clients use PAM_ESTABLISH_CRED instead or any of the other support PAM flags. Retains backwards compatibility by making resetcred=PAM_REINITIAL_CRED by default which is also truthy.
minrk
commented
7 years ago
PAM_REINITIALIZE_CRED creates a cred cache with the wrong uid in Kerberos. Changing resetcred to be of int type lets clients use PAM_ESTABLISH_CRED instead or any of the other support PAM flags. Retains backwards compatibility by making resetcred=PAM_REINITIAL_CRED by default which is also truthy.
Ref: https://github.com/jupyterhub/jupyterhub/issues/856