On Tue, May 3, 2022 at 11:29 AM tizo <tiz...@gmail.com> wrote: > > On Tue, May 3, 2022 at 9:18 AM tizo <tiz...@gmail.com> wrote: > > > > On Tue, May 3, 2022 at 2:43 AM Sumit Bose <sb...@redhat.com> wrote: > > > > > > Am Mon, May 02, 2022 at 03:15:05PM -0300 schrieb tizo: > > > > On Mon, May 2, 2022 at 2:36 PM Sumit Bose <sb...@redhat.com> wrote: > > > > > > > > > > Am Mon, May 02, 2022 at 12:32:34PM -0300 schrieb tizo: > > > > > > On Mon, May 2, 2022 at 11:56 AM Sumit Bose <sb...@redhat.com> wrote: > > > > > > > > > > > > > > Am Mon, May 02, 2022 at 11:39:40AM -0300 schrieb tizo: > > > > > > > > > Hi, > > > > > > > > > > > > > > > > > > thanks, at least I received your email. Can you run the tests > > > > > > > > > with > > > > > > > > > "krb5_use_fast = never" and "krb5_use_enterprise_principal = > > > > > > > > > True" again > > > > > > > > > but with 'debug_level = 9' in the [domain/...] section of > > > > > > > > > sssd.conf. > > > > > > > > > This will add some additional information into krb5_child.log > > > > > > > > > which > > > > > > > > > might help to understand why the client does not like the > > > > > > > > > reply from the > > > > > > > > > DC. > > > > > > > > > > > > > > > > > > bye, > > > > > > > > > Sumit > > > > > > > > > > > > > > > > > > > > > > > > > I cleared all the logs and ran the tests again with those > > > > > > > > parameters. > > > > > > > > I am sending the logs. Thanks! > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > can you try if you can change the password with 'kapsswd > > > > > > > u...@adtest.fnr.gub.uy'? I guess it will fail as well. Can you > > > > > > > take a > > > > > > > network trace of this command with tcpdump and send it as well? > > > > > > > > > > > > > > bye, > > > > > > > Sumit > > > > > > > > > > > > > > > > > > > It fails, and with kinit too: > > > > > > > > > > > > [root@idmt01 tmp]# kinit u...@adtest.fnr.gub.uy > > > > > > Password for u...@adtest.fnr.gub.uy: > > > > > > kinit: KDC reply did not match expectations while getting initial > > > > > > credentials > > > > > > [root@idmt01 tmp]# kpasswd u...@adtest.fnr.gub.uy > > > > > > Password for u...@adtest.fnr.gub.uy: > > > > > > kpasswd: KDC reply did not match expectations getting initial ticket > > > > > > > > > > > > I am sending tcpdump captures while trying with kpasswd. There are > > > > > > two, as there are two Samba DC (smbtest.adtest.fnr.gub.uy and > > > > > > smbtest02.adtest.fnr.gub.uy), but I think that the first one replied > > > > > > in this case. > > > > > > > > > > Hi, > > > > > > > > > > can you send the output of > > > > > > > > > > KRB5_TRACE=/dev/stdout kpasswd u...@adtest.fnr.gub.uy > > > > > > > > > > as well and your /etc/krb5.conf? > > > > > > Hi, > > > > > > thanks. Can you try to remove the krb5-pkinit package and run > > > > > > KRB5_TRACE=/dev/stdout kpasswd u...@adtest.fnr.gub.uy > > > > > > again while collecting the network trace and the debug output? > > > > > > bye, > > > Sumit > > > > > > > If I try to remove it, it tries to remove 301 packages. A lot of them > > are unused dependencies, but some ipa packages are dependent packages > > (ipa-healthcheck, ipa-server, ipa-server-dns, ipa-server-trust-ad). > > Here is the whole situation: > > > > [root@idmt01 ~]# dnf remove krb5-pkinit > > Dependencies resolved. > > ============================================================================================================================================================================================================ > > Package Architecture > > Version > > Repository Size > > ============================================================================================================================================================================================================ > > Removing: > > krb5-pkinit x86_64 > > 1.18.2-14.el8 > > @baseos 131 k > > Removing dependent packages: > > ipa-healthcheck noarch > > 0.7-6.module+el8.5.0+675+61f67439 > > @appstream 290 k > > ipa-server x86_64 > > 4.9.6-10.module+el8.5.0+719+4f06efb6 > > @appstream 1.1 M > > ipa-server-dns noarch > > 4.9.6-10.module+el8.5.0+719+4f06efb6 > > @appstream 91 k > > ipa-server-trust-ad x86_64 > > 4.9.6-10.module+el8.5.0+719+4f06efb6 > > @appstream 340 k > > Removing unused dependencies: > > 389-ds-base x86_64 > > 1.4.3.23-14.module+el8.5.0+745+c5be6847 > > @appstream 9.2 M > > 389-ds-base-libs x86_64 > > 1.4.3.23-14.module+el8.5.0+745+c5be6847 > > @appstream 4.3 M > > ant noarch > > 1.10.5-1.module+el8.3.0+255+2b2dd360 > > @appstream 451 k > > ant-lib noarch > > 1.10.5-1.module+el8.3.0+255+2b2dd360 > > @appstream 2.2 M > > apache-commons-cli noarch > > 1.4-4.module+el8.3.0+133+b8b54b58 > > @appstream 91 k > > apache-commons-codec noarch > > 1.11-3.module+el8.3.0+133+b8b54b58 > > @appstream 361 k > > apache-commons-io noarch > > 1:2.6-3.module+el8.3.0+133+b8b54b58 > > @appstream 281 k > > apache-commons-lang3 noarch > > 3.7-3.module+el8.3.0+133+b8b54b58 > > @appstream 580 k > > apache-commons-logging noarch > > 1.2-13.module+el8.3.0+133+b8b54b58 > > @appstream 180 k > > apache-commons-net noarch > > 3.6-3.module+el8.3.0+53+ea062990 > > @appstream 340 k > > apr x86_64 > > 1.6.3-12.el8 > > @appstream 272 k > > apr-util x86_64 > > 1.6.1-6.el8.1 > > @appstream 217 k > > apr-util-bdb x86_64 > > 1.6.1-6.el8.1 > > @appstream 11 k > > apr-util-openssl x86_64 > > 1.6.1-6.el8.1 > > @appstream 20 k > > atk x86_64 > > 2.28.1-1.el8 > > @appstream 1.2 M > > augeas-libs x86_64 > > 1.12.0-6.el8 > > @baseos 1.3 M > > autofs x86_64 > > 1:5.1.4-74.el8 > > @baseos 2.8 M > > bash-completion noarch > > 1:2.7-5.el8 > > @baseos 895 k > > bea-stax-api noarch > > 1.2.0-16.module+el8.3.0+53+ea062990 > > @appstream 39 k > > bind x86_64 > > 32:9.11.26-6.el8 > > @appstream 4.5 M > > bind-dyndb-ldap x86_64 > > 11.6-2.module+el8.4.0+429+6bd33fea > > @appstream 313 k > > bind-pkcs11 x86_64 > > 32:9.11.26-6.el8 > > @appstream 839 k > > bind-pkcs11-libs x86_64 > > 32:9.11.26-6.el8 > > @appstream 2.9 M > > bind-pkcs11-utils x86_64 > > 32:9.11.26-6.el8 > > @appstream 648 k > > cairo x86_64 > > 1.15.12-3.el8 > > @appstream 1.7 M > > certmonger x86_64 > > 0.79.13-3.el8 > > @appstream 2.9 M > > checkpolicy x86_64 > > 2.9-1.el8 > > @baseos 1.3 M > > copy-jdk-configs noarch > > 4.0-2.el8 > > @appstream 19 k > > custodia noarch > > 0.6.0-3.module+el8.4.0+429+6bd33fea > > @appstream 55 k > > cyrus-sasl-gssapi x86_64 > > 2.1.27-6.el8_5 > > @baseos 41 k > > cyrus-sasl-md5 x86_64 > > 2.1.27-6.el8_5 > > @baseos 86 k > > cyrus-sasl-plain x86_64 > > 2.1.27-6.el8_5 > > @baseos 45 k > > fontawesome-fonts noarch > > 4.7.0-4.el8 > > @appstream 297 k > > fontconfig x86_64 > > 2.13.1-4.el8 > > @baseos 694 k > > fontpackages-filesystem noarch > > 1.44-22.el8 > > @baseos 0 > > fribidi x86_64 > > 1.0.4-8.el8 > > @appstream 312 k > > gdk-pixbuf2 x86_64 > > 2.36.12-5.el8 > > @baseos 2.5 M > > gdk-pixbuf2-modules x86_64 > > 2.36.12-5.el8 > > @appstream 269 k > > giflib x86_64 > > 5.1.4-3.el8 > > @appstream 100 k > > glassfish-fastinfoset noarch > > 1.2.13-9.module+el8.3.0+53+ea062990 > > @appstream 395 k > > glassfish-jaxb-api noarch > > 2.2.12-8.module+el8.3.0+53+ea062990 > > @appstream 115 k > > glassfish-jaxb-core noarch > > 2.2.11-11.module+el8.3.0+53+ea062990 > > @appstream 236 k > > glassfish-jaxb-runtime noarch > > 2.2.11-11.module+el8.3.0+53+ea062990 > > @appstream 1.1 M > > glassfish-jaxb-txw2 noarch > > 2.2.11-11.module+el8.3.0+53+ea062990 > > @appstream 153 k > > graphite2 x86_64 > > 1.3.10-10.el8 > > @appstream 247 k > > gssproxy x86_64 > > 0.8.0-19.el8 > > @baseos 262 k > > gtk-update-icon-cache x86_64 > > 3.22.30-8.el8 > > @appstream 59 k > > gtk2 x86_64 > > 2.24.32-5.el8 > > @appstream 13 M > > harfbuzz x86_64 > > 1.7.5-3.el8 > > @appstream 724 k > > hicolor-icon-theme noarch > > 0.17-2.el8 > > @appstream 72 k > > httpcomponents-client noarch > > 4.5.5-4.module+el8.3.0+133+b8b54b58 > > @appstream 915 k > > httpcomponents-core noarch > > 4.4.10-3.module+el8.3.0+133+b8b54b58 > > @appstream 1.1 M > > httpd x86_64 > > 2.4.37-43.module+el8.5.0+747+83fae388.3 > > @appstream 4.3 M > > httpd-filesystem noarch > > 2.4.37-43.module+el8.5.0+747+83fae388.3 > > @appstream 400 > > httpd-tools x86_64 > > 2.4.37-43.module+el8.5.0+747+83fae388.3 > > @appstream 194 k > > ipa-client x86_64 > > 4.9.6-10.module+el8.5.0+719+4f06efb6 > > @appstream 260 k > > ipa-client-common noarch > > 4.9.6-10.module+el8.5.0+719+4f06efb6 > > @appstream 47 k > > ipa-common noarch > > 4.9.6-10.module+el8.5.0+719+4f06efb6 > > @appstream 3.9 M > > ipa-selinux noarch > > 4.9.6-10.module+el8.5.0+719+4f06efb6 > > @appstream 16 k > > ipa-server-common noarch > > 4.9.6-10.module+el8.5.0+719+4f06efb6 > > @appstream 2.3 M > > istack-commons-runtime noarch > > 2.21-9.el8 > > @appstream 63 k > > jackson-annotations noarch > > 2.10.0-1.module+el8.3.0+53+ea062990 > > @appstream 82 k > > jackson-core noarch > > 2.10.0-1.module+el8.3.0+53+ea062990 > > @appstream 376 k > > jackson-databind noarch > > 2.10.0-1.module+el8.3.0+53+ea062990 > > @appstream 1.5 M > > jackson-jaxrs-json-provider noarch > > 2.9.9-1.module+el8.3.0+53+ea062990 > > @appstream 20 k > > jackson-jaxrs-providers noarch > > 2.9.9-1.module+el8.3.0+53+ea062990 > > @appstream 47 k > > jackson-module-jaxb-annotations noarch > > 2.7.6-4.module+el8.3.0+53+ea062990 > > @appstream 47 k > > jasper-libs x86_64 > > 2.0.14-5.el8 > > @appstream 363 k > > java-1.8.0-openjdk x86_64 > > 1:1.8.0.322.b06-2.el8_5 > > @appstream 841 k > > java-1.8.0-openjdk-devel x86_64 > > 1:1.8.0.322.b06-2.el8_5 > > @appstream 41 M > > java-1.8.0-openjdk-headless x86_64 > > 1:1.8.0.322.b06-2.el8_5 > > @appstream 117 M > > javapackages-filesystem noarch > > 5.3.0-2.module+el8.3.0+125+5da1ae29 > > @appstream 1.9 k > > javapackages-tools noarch > > 5.3.0-2.module+el8.3.0+125+5da1ae29 > > @appstream 63 k > > jbigkit-libs x86_64 > > 2.1-14.el8 > > @appstream 107 k > > jboss-annotations-1.2-api noarch > > 1.0.0-4.el8 > > @appstream 64 k > > jboss-jaxrs-2.0-api noarch > > 1.0.0-6.el8 > > @appstream 135 k > > jboss-logging noarch > > 3.3.0-5.el8 > > @appstream 78 k > > jboss-logging-tools noarch > > 2.0.1-6.el8 > > @appstream 197 k > > jdeparser noarch > > 2.0.0-5.el8 > > @appstream 242 k > > jss x86_64 > > 4.9.1-1.module+el8.5.0+701+8dc610e5 > > @appstream 1.5 M > > keyutils x86_64 > > 1.5.10-9.el8 > > @baseos 118 k > > krb5-server x86_64 > > 1.18.2-14.el8 > > @baseos 1.4 M > > krb5-workstation x86_64 > > 1.18.2-14.el8 > > @baseos 3.3 M > > ldapjdk noarch > > 4.23.0-1.module+el8.5.0+701+8dc610e5 > > @appstream 350 k > > ldns x86_64 > > 1.7.0-21.el8 > > @appstream 418 k > > libX11 x86_64 > > 1.6.8-5.el8 > > @appstream 1.3 M > > libX11-common noarch > > 1.6.8-5.el8 > > @appstream 1.3 M > > libXau x86_64 > > 1.0.9-3.el8 > > @appstream 60 k > > libXcomposite x86_64 > > 0.4.4-14.el8 > > @appstream 35 k > > libXcursor x86_64 > > 1.1.15-3.el8 > > @appstream 46 k > > libXdamage x86_64 > > 1.1.4-14.el8 > > @appstream 29 k > > libXext x86_64 > > 1.3.4-1.el8 > > @appstream 90 k > > libXfixes x86_64 > > 5.0.3-7.el8 > > @appstream 27 k > > libXft x86_64 > > 2.3.3-1.el8 > > @appstream 129 k > > libXi x86_64 > > 1.7.10-1.el8 > > @appstream 73 k > > libXinerama x86_64 > > 1.1.4-1.el8 > > @appstream 15 k > > libXrandr x86_64 > > 1.5.2-1.el8 > > @appstream 48 k > > libXrender x86_64 > > 0.9.10-7.el8 > > @appstream 47 k > > libXtst x86_64 > > 1.2.3-7.el8 > > @appstream 34 k > > libdatrie x86_64 > > 0.2.9-7.el8 > > @appstream 59 k > > libfontenc x86_64 > > 1.1.3-8.el8 > > @appstream 55 k > > libipa_hbac x86_64 > > 2.5.2-2.el8_5.4 > > @baseos 58 k > > libkadm5 x86_64 > > 1.18.2-14.el8 > > @baseos 219 k > > libsss_simpleifp x86_64 > > 2.5.2-2.el8_5.4 > > @baseos 32 k > > libthai x86_64 > > 0.1.27-2.el8 > > @appstream 751 k > > libtiff x86_64 > > 4.0.9-20.el8 > > @appstream 506 k > > libverto-libevent x86_64 > > 0.3.0-5.el8 > > @baseos 12 k > > libxcb x86_64 > > 1.13.1-1.el8 > > @appstream 1.0 M > > libxslt x86_64 > > 1.1.32-6.el8 > > @baseos 734 k > > lksctp-tools x86_64 > > 1.0.18-3.el8 > > @baseos 246 k > > lua x86_64 > > 5.3.4-12.el8 > > @appstream 553 k > > mailcap noarch > > 2.1.48-3.el8 > > @baseos 71 k > > mod_auth_gssapi x86_64 > > 1.6.1-7.1.el8 > > @appstream 177 k > > mod_http2 x86_64 > > 1.15.7-3.module+el8.5.0+695+1fa8055e > > @appstream 394 k > > mod_lookup_identity x86_64 > > 1.0.0-4.el8 > > @appstream 50 k > > mod_session x86_64 > > 2.4.37-43.module+el8.5.0+747+83fae388.3 > > @appstream 112 k > > mod_ssl x86_64 > > 1:2.4.37-43.module+el8.5.0+747+83fae388.3 > > @appstream 266 k > > nfs-utils x86_64 > > 1:2.3.3-46.el8 > > @baseos 1.5 M > > nspr x86_64 > > 4.32.0-1.el8_4 > > @appstream 310 k > > nss x86_64 > > 3.67.0-7.el8_5 > > @appstream 2.0 M > > nss-softokn x86_64 > > 3.67.0-7.el8_5 > > @appstream 1.9 M > > nss-softokn-freebl x86_64 > > 3.67.0-7.el8_5 > > @appstream 792 k > > nss-sysinit x86_64 > > 3.67.0-7.el8_5 > > @appstream 14 k > > nss-tools x86_64 > > 3.67.0-7.el8_5 > > @appstream 2.3 M > > nss-util x86_64 > > 3.67.0-7.el8_5 > > @appstream 220 k > > oddjob x86_64 > > 0.34.7-1.el8 > > @appstream 162 k > > oddjob-mkhomedir x86_64 > > 0.34.7-1.el8 > > @appstream 71 k > > open-sans-fonts noarch > > 1.10-6.el8 > > @appstream 2.1 M > > opencryptoki x86_64 > > 3.16.0-7.el8_5 > > @baseos 382 k > > opencryptoki-icsftok x86_64 > > 3.16.0-7.el8_5 > > @baseos 809 k > > opencryptoki-libs x86_64 > > 3.16.0-7.el8_5 > > @baseos 123 k > > opendnssec x86_64 > > 2.1.7-1.module+el8.4.0+429+6bd33fea > > @appstream 1.7 M > > openldap-clients x86_64 > > 2.4.46-18.el8 > > @baseos 612 k > > openssl-perl x86_64 > > 1:1.1.1k-6.el8_5 > > @baseos 28 k > > pango x86_64 > > 1.42.4-8.el8 > > @appstream 771 k > > perl-Algorithm-Diff noarch > > 1.1903-9.el8 > > @baseos 108 k > > perl-Archive-Tar noarch > > 2.30-1.el8 > > @baseos 151 k > > perl-Carp noarch > > 1.42-396.el8 > > @baseos 41 k > > perl-Compress-Raw-Bzip2 x86_64 > > 2.081-1.el8 > > @baseos 57 k > > perl-Compress-Raw-Zlib x86_64 > > 2.081-1.el8 > > @baseos 143 k > > perl-DB_File x86_64 > > 1.842-1.el8 > > @appstream 181 k > > perl-Data-Dumper x86_64 > > 2.167-399.el8 > > @baseos 104 k > > perl-Digest noarch > > 1.17-395.el8 > > @appstream 26 k > > perl-Digest-MD5 x86_64 > > 2.55-396.el8 > > @appstream 55 k > > perl-Encode x86_64 > > 4:2.97-3.el8 > > @baseos 9.7 M > > perl-Errno x86_64 > > 1.28-420.el8 > > @baseos 9.3 k > > perl-Exporter noarch > > 5.72-396.el8 > > @baseos 54 k > > perl-File-Path noarch > > 2.15-2.el8 > > @baseos 63 k > > perl-File-Temp noarch > > 0.230.600-1.el8 > > @baseos 161 k > > perl-Getopt-Long noarch > > 1:2.50-4.el8 > > @baseos 136 k > > perl-HTTP-Tiny noarch > > 0.074-1.el8 > > @baseos 146 k > > perl-IO x86_64 > > 1.38-420.el8 > > @baseos 136 k > > perl-IO-Compress noarch > > 2.081-1.el8 > > @baseos 792 k > > perl-IO-Socket-IP noarch > > 0.39-5.el8 > > @appstream 97 k > > perl-IO-Socket-SSL noarch > > 2.066-4.module+el8.4.0+512+d4f0fc54 > > @appstream 604 k > > perl-IO-Zlib noarch > > 1:1.10-420.el8 > > @baseos 19 k > > perl-MIME-Base64 x86_64 > > 3.15-396.el8 > > @baseos 40 k > > perl-Mozilla-CA noarch > > 20160104-7.module+el8.4.0+529+e3b3e624 > > @appstream 5.6 k > > perl-Net-SSLeay x86_64 > > 1.88-1.module+el8.4.0+512+d4f0fc54 > > @appstream 1.3 M > > perl-PathTools x86_64 > > 3.74-1.el8 > > @baseos 178 k > > perl-Pod-Escapes noarch > > 1:1.07-395.el8 > > @baseos 25 k > > perl-Pod-Perldoc noarch > > 3.28-396.el8 > > @baseos 165 k > > perl-Pod-Simple noarch > > 1:3.35-395.el8 > > @baseos 531 k > > perl-Pod-Usage noarch > > 4:1.69-395.el8 > > @baseos 49 k > > perl-Scalar-List-Utils x86_64 > > 3:1.49-2.el8 > > @baseos 121 k > > perl-Socket x86_64 > > 4:2.027-3.el8 > > @baseos 121 k > > perl-Storable x86_64 > > 1:3.11-3.el8 > > @baseos 216 k > > perl-Term-ANSIColor noarch > > 4.06-396.el8 > > @baseos 88 k > > perl-Term-Cap noarch > > 1.17-395.el8 > > @baseos 29 k > > perl-Text-Diff noarch > > 1.45-2.el8 > > @baseos 84 k > > perl-Text-ParseWords noarch > > 3.30-395.el8 > > @baseos 13 k > > perl-Text-Tabs+Wrap noarch > > 2013.0523-395.el8 > > @baseos 24 k > > perl-Time-Local noarch > > 1:1.280-1.el8 > > @baseos 59 k > > perl-URI noarch > > 1.73-3.el8 > > @appstream 211 k > > perl-Unicode-Normalize x86_64 > > 1.25-396.el8 > > @baseos 622 k > > perl-constant noarch > > 1.33-396.el8 > > @baseos 26 k > > perl-interpreter x86_64 > > 4:5.26.3-420.el8 > > @baseos 14 M > > perl-libnet noarch > > 3.11-3.el8 > > @appstream 271 k > > perl-libs x86_64 > > 4:5.26.3-420.el8 > > @baseos 5.8 M > > perl-macros x86_64 > > 4:5.26.3-420.el8 > > @baseos 5.1 k > > perl-parent noarch > > 1:0.237-1.el8 > > @baseos 9.0 k > > perl-podlators noarch > > 4.11-1.el8 > > @baseos 281 k > > perl-threads x86_64 > > 1:2.21-2.el8 > > @baseos 106 k > > perl-threads-shared x86_64 > > 1.58-2.el8 > > @baseos 76 k > > pixman x86_64 > > 0.38.4-1.el8 > > @appstream 681 k > > pki-acme noarch > > 10.11.2-4.module+el8.5.0+731+6beda627 > > @appstream 2.8 M > > pki-base noarch > > 10.11.2-4.module+el8.5.0+731+6beda627 > > @appstream 1.9 M > > pki-base-java noarch > > 10.11.2-4.module+el8.5.0+731+6beda627 > > @appstream 767 k > > pki-ca noarch > > 10.11.2-4.module+el8.5.0+731+6beda627 > > @appstream 3.3 M > > pki-kra noarch > > 10.11.2-4.module+el8.5.0+731+6beda627 > > @appstream 617 k > > pki-server noarch > > 10.11.2-4.module+el8.5.0+731+6beda627 > > @appstream 6.0 M > > pki-servlet-4.0-api noarch > > 1:9.0.30-3.module+el8.5.0+697+f586bb30 > > @appstream 332 k > > pki-servlet-engine noarch > > 1:9.0.30-3.module+el8.5.0+697+f586bb30 > > @appstream 6.4 M > > pki-symkey x86_64 > > 10.11.2-4.module+el8.5.0+731+6beda627 > > @appstream 106 k > > pki-tools x86_64 > > 10.11.2-4.module+el8.5.0+731+6beda627 > > @appstream 1.4 M > > policycoreutils-python-utils noarch > > 2.9-16.el8 > > @baseos 138 k > > psmisc x86_64 > > 23.1-5.el8 > > @baseos 483 k > > publicsuffix-list noarch > > 20180723-1.el8 > > @baseos 224 k > > python3-argcomplete noarch > > 1.9.3-6.el8 > > @appstream 194 k > > python3-asn1crypto noarch > > 0.24.0-3.el8 > > @baseos 854 k > > python3-audit x86_64 > > 3.0-0.17.20191104git1c2f876.el8.1 > > @baseos 326 k > > python3-augeas noarch > > 0.5.0-12.el8 > > @appstream 87 k > > python3-babel noarch > > 2.5.1-7.el8 > > @appstream 20 M > > python3-cffi x86_64 > > 1.11.5-5.el8 > > @baseos 993 k > > python3-chardet noarch > > 3.0.4-7.el8 > > @baseos 904 k > > python3-cryptography x86_64 > > 3.2.1-5.el8 > > @baseos 2.7 M > > python3-custodia noarch > > 0.6.0-3.module+el8.4.0+429+6bd33fea > > @appstream 344 k > > python3-distro noarch > > 1.4.0-2.module+el8.3.0+120+426d8baf > > @appstream 150 k > > python3-dns noarch > > 1.15.0-10.el8 > > @baseos 1.0 M > > python3-gssapi x86_64 > > 1.5.1-5.el8 > > @appstream 1.9 M > > python3-html5lib noarch > > 1:0.999999999-6.el8 > > @appstream 1.1 M > > python3-idna noarch > > 2.5-5.el8 > > @baseos 509 k > > python3-ipaclient noarch > > 4.9.6-10.module+el8.5.0+719+4f06efb6 > > @appstream 7.1 M > > python3-ipalib noarch > > 4.9.6-10.module+el8.5.0+719+4f06efb6 > > @appstream 2.8 M > > python3-ipaserver noarch > > 4.9.6-10.module+el8.5.0+719+4f06efb6 > > @appstream 7.2 M > > python3-jinja2 noarch > > 2.10.1-3.el8 > > @appstream 2.5 M > > python3-jwcrypto noarch > > 0.5.0-1.module+el8.4.0+429+6bd33fea > > @appstream 231 k > > python3-kdcproxy noarch > > 0.4-5.module+el8.3.0+244+0b2ae752 > > @appstream 95 k > > python3-ldap x86_64 > > 3.3.1-2.el8 > > @appstream 820 k > > python3-ldb x86_64 > > 2.3.0-2.el8 > > @baseos 130 k > > python3-lib389 noarch > > 1.4.3.23-14.module+el8.5.0+745+c5be6847 > > @appstream 3.9 M > > python3-libipa_hbac x86_64 > > 2.5.2-2.el8_5.4 > > @baseos 39 k > > python3-libsemanage x86_64 > > 2.9-6.el8 > > @baseos 438 k > > python3-libsss_nss_idmap x86_64 > > 2.5.2-2.el8_5.4 > > @baseos 19 k > > python3-lxml x86_64 > > 4.2.3-3.el8 > > @appstream 4.8 M > > python3-markupsafe x86_64 > > 0.23-19.el8 > > @appstream 76 k > > python3-mod_wsgi x86_64 > > 4.6.4-4.el8 > > @appstream 9.5 M > > python3-netaddr noarch > > 0.7.19-8.el8 > > @appstream 8.4 M > > python3-netifaces x86_64 > > 0.10.6-4.el8 > > @appstream 39 k > > python3-nss x86_64 > > 1.0.1-10.module+el8.3.0+53+ea062990 > > @appstream 939 k > > python3-pip noarch > > 9.0.3-20.el8.rocky.0 > > @appstream 2.8 k > > python3-pki noarch > > 10.11.2-4.module+el8.5.0+731+6beda627 > > @appstream 698 k > > python3-policycoreutils noarch > > 2.9-16.el8 > > @baseos 5.4 M > > python3-psutil x86_64 > > 5.4.3-11.el8 > > @appstream 1.9 M > > python3-pyasn1 noarch > > 0.3.7-6.el8 > > @appstream 522 k > > python3-pyasn1-modules noarch > > 0.3.7-6.el8 > > @appstream 603 k > > python3-pycparser noarch > > 2.14-14.el8 > > @baseos 587 k > > python3-pysocks noarch > > 1.6.8-3.el8 > > @baseos 75 k > > python3-pytz noarch > > 2017.2-9.el8 > > @appstream 175 k > > python3-pyusb noarch > > 1.0.0-9.module+el8.4.0+429+6bd33fea > > @appstream 373 k > > python3-pyyaml x86_64 > > 3.12-12.el8 > > @baseos 634 k > > python3-qrcode-core noarch > > 5.1-12.module+el8.4.0+429+6bd33fea > > @appstream 105 k > > python3-requests noarch > > 2.20.0-2.1.el8_1 > > @baseos 369 k > > python3-samba x86_64 > > 4.14.5-10.el8_5 > > @baseos 18 M > > python3-setools x86_64 > > 4.3.0-2.el8 > > @baseos 2.6 M > > python3-setuptools noarch > > 39.2.0-6.el8 > > @baseos 450 k > > python3-sss x86_64 > > 2.5.2-2.el8_5.4 > > @baseos 58 k > > python3-sss-murmur x86_64 > > 2.5.2-2.el8_5.4 > > @baseos 8.3 k > > python3-sssdconfig noarch > > 2.5.2-2.el8_5.4 > > @baseos 245 k > > python3-systemd x86_64 > > 234-8.el8 > > @appstream 263 k > > python3-talloc x86_64 > > 2.3.2-1.el8 > > @baseos 29 k > > python3-tdb x86_64 > > 1.4.3-1.el8 > > @baseos 38 k > > python3-tevent x86_64 > > 0.11.0-0.el8 > > @baseos 29 k > > python3-urllib3 noarch > > 1.24.2-5.el8 > > @baseos 606 k > > python3-webencodings noarch > > 0.5.1-6.el8 > > @appstream 72 k > > python3-yubico noarch > > 1.3.2-9.module+el8.4.0+429+6bd33fea > > @appstream 220 k > > python36 x86_64 > > 3.6.8-38.module+el8.5.0+671+195e4563 > > @appstream 13 k > > quota x86_64 > > 1:4.04-14.el8 > > @baseos 887 k > > quota-nls noarch > > 1:4.04-14.el8 > > @baseos 277 k > > relaxngDatatype noarch > > 2011.1-7.module+el8.3.0+53+ea062990 > > @appstream 30 k > > resteasy noarch > > 3.0.26-6.module+el8.5.0+697+f586bb30 > > @appstream 1.2 M > > rocky-logos-httpd noarch > > 85.0-3.el8 > > @baseos 22 k > > rocky-logos-ipa noarch > > 85.0-3.el8 > > @appstream 630 k > > rpcbind x86_64 > > 1.2.5-8.el8 > > @baseos 108 k > > samba x86_64 > > 4.14.5-10.el8_5 > > @baseos 2.5 M > > samba-common-tools x86_64 > > 4.14.5-10.el8_5 > > @baseos 1.2 M > > samba-libs x86_64 > > 4.14.5-10.el8_5 > > @baseos 301 k > > samba-winbind x86_64 > > 4.14.5-10.el8_5 > > @baseos 1.5 M > > samba-winbind-modules x86_64 > > 4.14.5-10.el8_5 > > @baseos 87 k > > slapi-nis x86_64 > > 0.56.6-4.module+el8.5.0+675+61f67439 > > @appstream 452 k > > slf4j noarch > > 1.7.25-4.module+el8.5.0+697+f586bb30 > > @appstream 82 k > > slf4j-jdk14 noarch > > 1.7.25-4.module+el8.5.0+697+f586bb30 > > @appstream 11 k > > softhsm x86_64 > > 2.6.0-5.module+el8.4.0+429+6bd33fea > > @appstream 1.5 M > > sscg x86_64 > > 2.3.3-14.el8 > > @appstream 98 k > > sssd-common-pac x86_64 > > 2.5.2-2.el8_5.4 > > @baseos 251 k > > sssd-dbus x86_64 > > 2.5.2-2.el8_5.4 > > @baseos 352 k > > sssd-ipa x86_64 > > 2.5.2-2.el8_5.4 > > @baseos 708 k > > sssd-krb5-common x86_64 > > 2.5.2-2.el8_5.4 > > @baseos 290 k > > sssd-tools x86_64 > > 2.5.2-2.el8_5.4 > > @baseos 421 k > > sssd-winbind-idmap x86_64 > > 2.5.2-2.el8_5.4 > > @baseos 16 k > > stax-ex noarch > > 1.7.7-8.module+el8.3.0+53+ea062990 > > @appstream 80 k > > tar x86_64 > > 2:1.30-5.el8 > > @baseos 2.7 M > > tomcatjss noarch > > 7.7.0-1.module+el8.5.0+701+8dc610e5 > > @appstream 76 k > > ttmkfdir x86_64 > > 3.0.9-54.el8 > > @appstream 124 k > > tzdata-java noarch > > 2022a-1.el8 > > @appstream 362 k > > words noarch > > 3.0-28.el8 > > @baseos 4.7 M > > xalan-j2 noarch > > 2.7.1-38.module+el8.3.0+53+ea062990 > > @appstream 2.1 M > > xerces-j2 noarch > > 2.11.0-34.module+el8.3.0+53+ea062990 > > @appstream 1.3 M > > xml-commons-apis noarch > > 1.4.01-25.module+el8.5.0+697+f586bb30 > > @appstream 330 k > > xml-commons-resolver noarch > > 1.2-26.module+el8.3.0+53+ea062990 > > @appstream 121 k > > xmlrpc-c x86_64 > > 1.51.0-5.el8 > > @baseos 592 k > > xmlrpc-c-client x86_64 > > 1.51.0-5.el8 > > @baseos 56 k > > xmlstreambuffer noarch > > 1.5.4-8.module+el8.3.0+53+ea062990 > > @appstream 113 k > > xorg-x11-font-utils x86_64 > > 1:7.5-41.el8 > > @appstream 362 k > > xorg-x11-fonts-Type1 noarch > > 7.5-19.el8 > > @appstream 863 k > > xsom noarch > > 0-19.20110809svn.module+el8.3.0+53+ea062990 > > @appstream 452 k > > > > Transaction Summary > > ============================================================================================================================================================================================================ > > Remove 301 Packages > > > > Freed space: 471 M > > Is this ok [y/N]: > > Having forced the removal with rpm -e krb5-pkinit --nodeps, I have the > following output: > > [root@idmt01 ~]# KRB5_TRACE=/dev/stdout kpasswd u...@adtest.fnr.gub.uy > [1801] 1651587927.720656: Getting initial credentials for > u...@adtest.fnr.gub.uy > [1801] 1651587927.720657: Setting initial creds service to kadmin/changepw > [1801] 1651587927.720659: Sending unauthenticated request > [1801] 1651587927.720660: Sending request (179 bytes) to ADTEST.FNR.GUB.UY > [1801] 1651587927.720661: Sending DNS URI query for > _kerberos.ADTEST.FNR.GUB.UY. > [1801] 1651587927.720662: No URI records found > [1801] 1651587927.720663: Sending DNS SRV query for > _kerberos._udp.ADTEST.FNR.GUB.UY. > [1801] 1651587927.720664: SRV answer: 0 100 88 "smbtest.adtest.fnr.gub.uy." > [1801] 1651587927.720665: SRV answer: 0 100 88 "smbtest02.adtest.fnr.gub.uy." > [1801] 1651587927.720666: Sending DNS SRV query for > _kerberos._tcp.ADTEST.FNR.GUB.UY. > [1801] 1651587927.720667: SRV answer: 0 100 88 "smbtest.adtest.fnr.gub.uy." > [1801] 1651587927.720668: SRV answer: 0 100 88 "smbtest02.adtest.fnr.gub.uy." > [1801] 1651587927.720669: Resolving hostname smbtest.adtest.fnr.gub.uy. > [1801] 1651587927.720670: Resolving hostname smbtest02.adtest.fnr.gub.uy. > [1801] 1651587927.720671: Resolving hostname smbtest.adtest.fnr.gub.uy. > [1801] 1651587927.720672: Initiating TCP connection to stream 10.2.100.3:88 > [1801] 1651587927.720673: Sending TCP request to stream 10.2.100.3:88 > [1801] 1651587927.720674: Received answer (314 bytes) from stream > 10.2.100.3:88 > [1801] 1651587927.720675: Terminating TCP connection to stream 10.2.100.3:88 > [1801] 1651587927.720676: Sending DNS URI query for > _kerberos.ADTEST.FNR.GUB.UY. > [1801] 1651587927.720677: No URI records found > [1801] 1651587927.720678: Sending DNS SRV query for > _kerberos-master._tcp.ADTEST.FNR.GUB.UY. > [1801] 1651587927.720679: No SRV records found > [1801] 1651587927.720680: Response was not from master KDC > [1801] 1651587927.720681: Received error from KDC: > -1765328359/Additional pre-authentication required > [1801] 1651587927.720684: Preauthenticating using KDC method data > [1801] 1651587927.720685: Processing preauth types: PA-PK-AS-REQ (16), > PA-PK-AS-REP_OLD (15), PA-PKINIT-KX (147), PA-ENC-TIMESTAMP (2), > PA-FX-FAST (136), 655, PA-ETYPE-INFO2 (19) > [1801] 1651587927.720686: Selected etype info: etype aes256-cts, salt > "ADTEST.FNR.GUB.UYusu1", params "\x00\x00\x10\x00" > Password for u...@adtest.fnr.gub.uy: > [1801] 1651587936.906047: AS key obtained for encrypted timestamp: > aes256-cts/75AC > [1801] 1651587936.906049: Encrypted timestamp (for 1651587936.921584): > plain 301AA011180F32303232303530333134323533365AA10502030E0FF0, > encrypted > EB387E7F664143E3E03C1206A88BAD891E100BEC30FA51893222E41B95325D3DA1AF1E12FC4F1C7BC5856CA42A67FD0FF51CBB8DF46882C9 > [1801] 1651587936.906050: Preauth module encrypted_timestamp (2) > (real) returned: 0/Success > [1801] 1651587936.906051: Produced preauth for next request: > PA-ENC-TIMESTAMP (2) > [1801] 1651587936.906052: Sending request (257 bytes) to ADTEST.FNR.GUB.UY > [1801] 1651587936.906053: Sending DNS URI query for > _kerberos.ADTEST.FNR.GUB.UY. > [1801] 1651587936.906054: No URI records found > [1801] 1651587936.906055: Sending DNS SRV query for > _kerberos._udp.ADTEST.FNR.GUB.UY. > [1801] 1651587936.906056: SRV answer: 0 100 88 "smbtest02.adtest.fnr.gub.uy." > [1801] 1651587936.906057: SRV answer: 0 100 88 "smbtest.adtest.fnr.gub.uy." > [1801] 1651587936.906058: Sending DNS SRV query for > _kerberos._tcp.ADTEST.FNR.GUB.UY. > [1801] 1651587936.906059: SRV answer: 0 100 88 "smbtest02.adtest.fnr.gub.uy." > [1801] 1651587936.906060: SRV answer: 0 100 88 "smbtest.adtest.fnr.gub.uy." > [1801] 1651587936.906061: Resolving hostname smbtest02.adtest.fnr.gub.uy. > [1801] 1651587936.906062: Resolving hostname smbtest.adtest.fnr.gub.uy. > [1801] 1651587936.906063: Resolving hostname smbtest02.adtest.fnr.gub.uy. > [1801] 1651587936.906064: Initiating TCP connection to stream 10.2.100.4:88 > [1801] 1651587936.906065: Sending TCP request to stream 10.2.100.4:88 > [1801] 1651587936.906066: Received answer (1468 bytes) from stream > 10.2.100.4:88 > [1801] 1651587936.906067: Terminating TCP connection to stream 10.2.100.4:88 > [1801] 1651587936.906068: Sending DNS URI query for > _kerberos.ADTEST.FNR.GUB.UY. > [1801] 1651587936.906069: No URI records found > [1801] 1651587936.906070: Sending DNS SRV query for > _kerberos-master._tcp.ADTEST.FNR.GUB.UY. > [1801] 1651587936.906071: No SRV records found > [1801] 1651587936.906072: Response was not from master KDC > [1801] 1651587936.906073: Processing preauth types: PA-ETYPE-INFO2 (19) > [1801] 1651587936.906074: Selected etype info: etype aes256-cts, salt > "ADTEST.FNR.GUB.UYusu1", params "\x00\x00\x10\x00" > [1801] 1651587936.906075: Produced preauth for next request: (empty) > [1801] 1651587936.906076: AS key determined by preauth: aes256-cts/75AC > [1801] 1651587936.906077: Decrypted AS reply; session key is: aes256-cts/4C33 > [1801] 1651587936.906078: FAST negotiation: available > [1801] 1651587936.906079: Retrying AS request with master KDC > [1801] 1651587936.906080: Getting initial credentials for > u...@adtest.fnr.gub.uy > [1801] 1651587936.906081: Setting initial creds service to kadmin/changepw > [1801] 1651587936.906083: Sending unauthenticated request > [1801] 1651587936.906084: Sending request (179 bytes) to > ADTEST.FNR.GUB.UY (master) > [1801] 1651587936.906085: Sending DNS URI query for > _kerberos.ADTEST.FNR.GUB.UY. > [1801] 1651587936.906086: No URI records found > [1801] 1651587936.906087: Sending DNS SRV query for > _kerberos-master._udp.ADTEST.FNR.GUB.UY. > [1801] 1651587936.906088: Sending DNS SRV query for > _kerberos-master._tcp.ADTEST.FNR.GUB.UY. > [1801] 1651587936.906089: No SRV records found > kpasswd: KDC reply did not match expectations getting initial ticket > > I am sending the network trace at that moment too. Thanks!
Any news about this?. Thanks very much. _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
