Package: krb5-user
Version: 1.15-1.2
Severity: wishlist
Dear Maintainer,
* What led up to the situation?
I'm running a road warrior setup and authenticate via KDCProxy. If the package
krb5-ktls is not installed authentication fails:
# KRB5_TRACE=/dev/stderr kinit admin
[12904] 1516167827.841029: Getting initial credentials for admin at EXAMPLE.ORG
[12904] 1516167827.845059: Sending request (169 bytes) to EXAMPLE.ORG
[12904] 1516167827.845173: Resolving hostname kdcproxy.example.org
[12904] 1516167828.115087: Terminating TCP connection to https 89.0.xx.yy:443
[12904] 1516167828.551801: Terminating TCP connection to https
2a0a:a541:57ed:0:216:[redacted]:443
kinit: Cannot contact any KDC for realm EXAMPLE.ORG' while getting initial
credentials
* What exactly did you do (or not do) that was effective (or
ineffective)?
After installation of krb5-k5tls authentication succeded.
I've discussed with upstream and there will be better logs added:
http://mailman.mit.edu/pipermail/kerberos/2018-January/021913.html
There was also the suggestion to either add a recommends/depends to
krb5-k5tls to krb5-user or maybe to integrate it in libkrb5 as CentOS
does.
Better logging will be fine for me - this bug is to discuss possible
packaging changes (recommends/depends or integration into libkrb5).
Feel free to close the bug if you think packaging is fine and there is
no change needed.
-- System Information:
Debian Release: 9.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.9.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8),
LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages krb5-user depends on:
ii krb5-config 2.6
ii libc6 2.24-11+deb9u1
ii libcomerr2 1.43.4-2
ii libgssapi-krb5-2 1.15-1.2
ii libgssrpc4 1.15-1.2
ii libk5crypto3 1.15-1.2
ii libkadm5clnt-mit11 1.15-1.2
ii libkadm5srv-mit11 1.15-1.2
ii libkdb5-8 1.15-1.2
ii libkeyutils1 1.5.9-9
ii libkrb5-3 1.15-1.2
ii libkrb5support0 1.15-1.2
ii libss2 1.43.4-2
krb5-user recommends no packages.
krb5-user suggests no packages.
-- no debconf information
