So if I understand this report correctly, the problem was that there was a problem with keytab renewal, breaking authentication in some scenarios, and that installing adcli "fixed" it. However, this was a bug, and installing adcli shouldn't have been necessary. Installing adcli was really a workaround, and we believe this is fixed properly now.
So, Timo has demoted adcli to Suggests in Debian (https://anonscm.debian.org/cgit/pkg- sssd/sssd.git/commit/?id=d26fd6b8d6dfe9cb3d74c0caa8566bfc3fc7b977). I'll upload the same thing in Ubuntu shortly to fix the component mismatch. So "add adcli as sssd dependency" was inadvertently presupposing the solution, we have fixed the root cause, and so we won't be adding adcli as an sssd dependency after all. But this bug is fixed, because sssd should work correctly without adcli installed again, so I'm marking this bug Fix Released. If any of this is wrong, please do correct me. I'll stay subscribed to the bug. ** Summary changed: - add adcli as sssd dependency + Problem with keytab renewal, breaking authentication when sssd is joined to an AD domain ** Changed in: sssd (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1590471 Title: Problem with keytab renewal, breaking authentication when sssd is joined to an AD domain To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1590471/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
