I'm not exactly sure, but I think after authenticating the user, pam_setcred should be called. This is mainly triggered by an issue I'm currently trying to solve (cruegge/pam-gnupg#7), but there is another case in i3lock (i3/i3lock#9), where not calling pam_setcred would not refresh Kerberos tickets.
xyb3rt
commented
4 years ago
I'm not exactly sure, but I think after authenticating the user,
pam_setcredshould be called. This is mainly triggered by an issue I'm currently trying to solve (cruegge/pam-gnupg#7), but there is another case in i3lock (i3/i3lock#9), where not callingpam_setcredwould not refresh Kerberos tickets.