On (11/05/21 09:18), Joakim Tjernlund wrote: >On Tue, 2021-05-11 at 11:09 +0200, Joakim Tjernlund wrote: >> On Tue, 2021-05-11 at 10:25 +0200, Pavel Březina wrote: >> > On 5/10/21 8:10 PM, Joakim Tjernlund wrote: >> > > On Mon, 2021-05-10 at 16:01 +0000, Joakim Tjernlund wrote: >> > > > On Mon, 2021-05-10 at 17:48 +0200, Pavel Březina wrote: >> > > > > On 5/10/21 5:12 PM, Joakim Tjernlund wrote: >> > > > > > On Mon, 2021-05-10 at 14:53 +0000, Joakim Tjernlund wrote: >> > > > > > > I decided to test new sssd/KCM and this is what I get: >> > > > > > > >> > > > > > > - ssh from non sssd/krb machine to new sssd machine, entered >> > > > > > > password >> > > > > > > ~ $ klist >> > > > > > > Ticket cache: KCM:1001 >> > > > > > > Default principal: [email protected] >> > > > > > > >> > > > > > > Valid starting Expires Service principal >> > > > > > > 10/05/21 16:47:32 11/05/21 02:47:32 >> > > > > > > krbtgt/[email protected] >> > > > > > > renew until 17/05/21 16:47:32 >> > > > > > > ~ $ ksu >> > > > > > > ksu: Ccache function not supported: not implemented while >> > > > > > > selecting the best principal >> > > > > > > >> > > > > > > I also have mit-kr5b master installed. >> > > > > > > >> > > > > > > Did I miss something? >> > > > > >> > > > > >> > > > > krb5 master contains: >> > > > > https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fkrb5%2Fkrb5%2Fcommit%2F795ebba8c039be172ab93cd41105c73ffdba0fdb&data=04%7C01%7Cjoakim.tjernlund%40infinera.com%7C14ec542efa8846b7f5c808d9145665e4%7C285643de5f5b4b03a1530ae2dc8aaf77%7C1%7C0%7C637563183573713658%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=CWtAfLIp%2F29T2lL1VvmbtcI1jJMzsHL7xbhjh2KZWCk%3D&reserved=0 >> > > > > >> > > > > but RETRIEVE is not implemented in sssd-kcm. Kerberos should >> > > > > fallback to >> > > > > its own function that was used before this commit. >> > > >> > > FYI, reverting that commit makes it work. >> > >> > Thanks for the information. Please, open a ticket against krb5. >> >> Easier said than done. I could not find an issue tracker for mit-krb5, is >> there one? >> Found a bug email list I mailed but not sure it will get through(I am not >> joining yet another list just to report a bug) >> >> Jocke > >Managed to add a comment here: >https://github.com/krb5/krb5/pull/1178
README says you need to send an email https://github.com/krb5/krb5/blob/ddb189ff95350afc0e3e063016a0f0dd5213dc4c/README#L53 LS _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
