Re: sssd-2.6.0 update in F35 breaks klist/kinit here
On Tue, Oct 26, 2021 22:52:40 -0400, Matthew Miller wrote: > On Fri, Oct 22, 2021 at 03:56:42PM +0100, Ankur Sinha wrote: > > If it's a general issue, it'll break kinit etc. for all package > > maintainers as soon as they get the update. (Running `fedpkg > > new-sources` was how I ran into the issue). > > I can't reproduce, but I'm _just_ using Fedora kerberos. (Theoretically my > employer also has it, but having multiple realms involved is just too much > work for me, and, you know, priorities.) It'd be good to get test reports > from other organizations using kerberos in production. We narrowed it down on the bug, and a fix is now available. It was because my credentials were in an older format (because I upgrade and don't reinstall), and some tweaks had to be made to gracefully get my system to discard the older format and use the new credential format. So it only affects this particular corner case. Alexey has mentioned a PR and a test build here which fixes the issue for me: https://bugzilla.redhat.com/show_bug.cgi?id=2016992#c17 -- Thanks, Regards, Ankur Sinha "FranciscoD" (He / Him / His) | https://fedoraproject.org/wiki/User:Ankursinha Time zone: Europe/London signature.asc Description: PGP signature ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: sssd-2.6.0 update in F35 breaks klist/kinit here
On Fri, Oct 22, 2021 at 03:56:42PM +0100, Ankur Sinha wrote: > If it's a general issue, it'll break kinit etc. for all package > maintainers as soon as they get the update. (Running `fedpkg > new-sources` was how I ran into the issue). I can't reproduce, but I'm _just_ using Fedora kerberos. (Theoretically my employer also has it, but having multiple realms involved is just too much work for me, and, you know, priorities.) It'd be good to get test reports from other organizations using kerberos in production. -- Matthew Miller Fedora Project Leader ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: sssd-2.6.0 update in F35 breaks klist/kinit here
On Mon, Oct 25, 2021 10:41:44 +0200, Pavel Březina wrote: > > I've unpushed the package so far, so it won't be pushed to stable. Please > open a bugzilla with KCM logs attached. Also please, provide output of > failing klist with krb5 tracing enabled (KRB5_TRACE=/dev/stderr). Thanks very much. I filed the initial report here: https://bugzilla.redhat.com/show_bug.cgi?id=2016992 -- Thanks, Regards, Ankur Sinha "FranciscoD" (He / Him / His) | https://fedoraproject.org/wiki/User:Ankursinha Time zone: Europe/London signature.asc Description: PGP signature ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: sssd-2.6.0 update in F35 breaks klist/kinit here
On 10/22/21 16:56, Ankur Sinha wrote: Hi folks, I just updated two F35 systems with updates-testing enabled and then `klist` etc. stopped working for me. Some investigation seems to indicate that the sssd-2.6.0 update may be involved---downgrading back to 2.5.2 immediately fixes the issue on both systems. The update however, has 3+ karma already, so it's on it's way to stable: https://bodhi.fedoraproject.org/updates/FEDORA-2021-360425682d Could more folks please test it out to see if it's a package update related bug? (I've not touched my configs at all as far as I can remember, so it *shouldn't* be specific to my two machines). If it's a general issue, it'll break kinit etc. for all package maintainers as soon as they get the update. (Running `fedpkg new-sources` was how I ran into the issue). I've unpushed the package so far, so it won't be pushed to stable. Please open a bugzilla with KCM logs attached. Also please, provide output of failing klist with krb5 tracing enabled (KRB5_TRACE=/dev/stderr). Thanks, Pavel. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: sssd-2.6.0 update in F35 breaks klist/kinit here
On Sat, Oct 23, 2021 14:09:55 +0300, Otto Urpelainen wrote: > Ankur Sinha kirjoitti 22.10.2021 klo 17.56: > > > Hi, Hi, > > I am sure exactly what should break, but I could not reproduce this: Thanks for testing it out. > 1. $ sudo dnf upgrade --enablerepo=updates-testing > --advisory=FEDORA-2021-360425682d > 2. reboot just to be sure > 3. $ kinit u...@fedoraproject.org > 4. Enter password as requested > 5. $ klist > 6. $ fedpkg new-sources > > Everything still works. In the new-sources step I used a file that was > already in the cache, so that the cache would not be polluted by files added > just for testing. Does that make a difference? I don't *think* so. In my case there was no cache file at `/tmp/..` at all. This is the complete upgrade transaction but my limited knowledge of klist etc. doesn't tell me if anything else could be involved. Even now, upgrading sssd stops kinit from working. I'll go try another update and reboot and see if it helps: Transaction ID : 760 Begin time : Wed 20 Oct 2021 18:44:54 BST Begin rpmdb: 3666:95fd579de57a4f33896281a9940dda36be2b6442 End time : Wed 20 Oct 2021 18:46:34 BST (100 seconds) End rpmdb : 3667:777c44781207263b870f12bb21e763ac68b7aac6 User : System Return-Code: Success Releasever : 35 Command Line : system-upgrade upgrade Comment: Packages Altered: Reason Change Box2D-2.4.1-6.fc35.x86_64 @fedora Install flite-2.2-1.fc35.x86_64 @updates-testing Install kernel-5.14.12-300.fc35.x86_64 @updates-testing Install kernel-core-5.14.12-300.fc35.x86_64 @updates-testing Install kernel-modules-5.14.12-300.fc35.x86_64 @updates-testing Upgrade neomutt-5:20211015-1.fc35.x86_64 @copr:copr.fedorainfracloud.org:flatcap:neomutt Upgraded neomutt-5:20210205-1.fc34.x86_64 @@System Upgrade glib2-2.70.0-5.fc35.x86_64 @fedora Upgraded glib2-2.70.0-4.fc35.x86_64 @@System Upgrade gnome-session-40.1.1-3.fc35.x86_64 @fedora Upgraded gnome-session-40.1.1-2.fc35.x86_64 @@System Upgrade gnome-session-wayland-session-40.1.1-3.fc35.x86_64 @fedora Upgraded gnome-session-wayland-session-40.1.1-2.fc35.x86_64 @@System Upgrade gnome-session-xsession-40.1.1-3.fc35.x86_64@fedora Upgraded gnome-session-xsession-40.1.1-2.fc35.x86_64 @@System Upgrade jq-1.6-10.fc35.x86_64 @fedora Upgraded jq-1.6-9.fc35.x86_64 @@System Upgrade gstreamer1-plugin-openh264-1.19.1-1.fc35.x86_64 @fedora-cisco-openh264 Upgraded gstreamer1-plugin-openh264-1.18.2-1.fc35.x86_64 @@System Upgrade mozilla-openh264-2.1.1-3.fc35.x86_64 @fedora-cisco-openh264 Upgraded mozilla-openh264-2.1.1-2.fc35.x86_64 @@System Upgrade openh264-2.1.1-3.fc35.x86_64 @fedora-cisco-openh264 Upgraded openh264-2.1.1-2.fc35.x86_64 @@System Upgrade adobe-mappings-cmap-20190730-1.fc35.noarch @updates-testing Upgraded adobe-mappings-cmap-20171205-11.fc35.noarch @@System Upgrade adobe-mappings-cmap-deprecated-20190730-1.fc35.noarch @updates-testing Upgraded adobe-mappings-cmap-deprecated-20171205-11.fc35.noarch @@System Upgrade bluez-5.62-1.fc35.x86_64 @updates-testing Upgraded bluez-5.61-1.fc35.x86_64 @@System Upgrade bluez-cups-5.62-1.fc35.x86_64 @updates-testing Upgraded bluez-cups-5.61-1.fc35.x86_64 @@System Upgrade bluez-libs-5.62-1.fc35.x86_64 @updates-testing Upgraded bluez-libs-5.61-1.fc35.x86_64 @@System Upgrade bluez-obexd-5.62-1.fc35.x86_64 @updates-testing Upgraded bluez-obexd-5.61-1.fc35.x86_64 @@System Upgrade container-selinux-2:2.170.0-2.fc35.noarch @updates-testing Upgraded container-selinux-2:2.170.0-1.fc35.noarch @@System Upgrade environment-modules-5.0.1-1.fc35.x86_64 @updates-testing Upgraded environment-modules-5.0.0-1.fc35.x86_64 @@System Upgrade fedora-third-party-0.8-1.fc35.noarch @updates-testing Upgraded fedora-third-party-0.7-1.fc35.noarch @@System Upgrade git-2.33.1-1.fc35.x86_64
Re: sssd-2.6.0 update in F35 breaks klist/kinit here
Ankur Sinha kirjoitti 22.10.2021 klo 17.56: Hi folks, I just updated two F35 systems with updates-testing enabled and then `klist` etc. stopped working for me. Some investigation seems to indicate that the sssd-2.6.0 update may be involved---downgrading back to 2.5.2 immediately fixes the issue on both systems. The update however, has 3+ karma already, so it's on it's way to stable: https://bodhi.fedoraproject.org/updates/FEDORA-2021-360425682d Could more folks please test it out to see if it's a package update related bug? (I've not touched my configs at all as far as I can remember, so it *shouldn't* be specific to my two machines). If it's a general issue, it'll break kinit etc. for all package maintainers as soon as they get the update. (Running `fedpkg new-sources` was how I ran into the issue). Hi, I am sure exactly what should break, but I could not reproduce this: 1. $ sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-360425682d 2. reboot just to be sure 3. $ kinit u...@fedoraproject.org 4. Enter password as requested 5. $ klist 6. $ fedpkg new-sources Everything still works. In the new-sources step I used a file that was already in the cache, so that the cache would not be polluted by files added just for testing. Does that make a difference? Otto ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
sssd-2.6.0 update in F35 breaks klist/kinit here
Hi folks, I just updated two F35 systems with updates-testing enabled and then `klist` etc. stopped working for me. Some investigation seems to indicate that the sssd-2.6.0 update may be involved---downgrading back to 2.5.2 immediately fixes the issue on both systems. The update however, has 3+ karma already, so it's on it's way to stable: https://bodhi.fedoraproject.org/updates/FEDORA-2021-360425682d Could more folks please test it out to see if it's a package update related bug? (I've not touched my configs at all as far as I can remember, so it *shouldn't* be specific to my two machines). If it's a general issue, it'll break kinit etc. for all package maintainers as soon as they get the update. (Running `fedpkg new-sources` was how I ran into the issue). -- Thanks, Regards, Ankur Sinha "FranciscoD" (He / Him / His) | https://fedoraproject.org/wiki/User:Ankursinha Time zone: Europe/London signature.asc Description: PGP signature ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
