> Any idea what method I should be using to set the environment variable? Do you
> see the environment variable in 'about:support'?

For some reason it does not show up in about:support, but it is there if snap
run --shell firefox -c 'env|grep KRB' shows it.

> I first tried what appeared to be the proper way, but got an error:
> 
>         wtcline@wtcline-desk20:~$ sudo snap set firefox
> env.KRB5CCNAME="FILE:/tmp/krb5cc_1000" error: cannot perform the following
> tasks:
>         - Run configure hook of "firefox" snap (invalid option name:
> "KRB5CCNAME")

I did not know this method. The manual crafting of the environment variable
works for me (although in my case it already is in the environment so I don't
really need to do it and am just showing it for demonstration's sake):

--->
# Locate the ticket
% ls /tmp/krb5cc_746400500_DdKFTS 
/tmp/krb5cc_746400500_DdKFTS
# Make sure the variable is correctly transformed in the sandbox
% KRB5CCNAME=FILE:/tmp/krb5cc_746400500_DdKFTS snap run --shell firefox -c
'env|grep KRB' KRB5CCNAME=FILE:/var/lib/snapd/hostfs/tmp/krb5cc_746400500_DdKFTS
# Now just launch Firefox and navigate to a place where Kerberos is needed
% KRB5CCNAME=FILE:/tmp/krb5cc_746400500_DdKFTS snap run firefox
<---

> Yet if I set 'KRB5CCNAME=/tmp/krb5cc_1000' in '/etc/environment' and
> reboot then I can get output like the following:

Note KRB5CCNAME must start with the file type, here FILE, so

  [INCORRECT] KRB5CCNAME=/tmp/krb5cc_1000
  [-CORRECT-] KRB5CCNAME=FILE:/tmp/krb5cc_1000

That is why you saw the "will not expose" error.

> At some point I
> also managed to get:
> 
>         wtcline@wtcline-desk20:/home/wtcline$ snap run --shell firefox -c
> 'env|grep KRB' KRB5CCNAME=FILE:/var/lib/snapd/hostfs/tmp/krb5cc_1000

That one is correct, you probably fixed the missing prefix at some point without
noticing.

Now, from what I gather it nonetheless does not work, so let's take a step
back. Can you walk me through the minimal path from boot until your attempt on
Firefox? I.e., do you get a log in screen, you log in with your normal, local
user? Then you generate a ticket with Kinit and then start Firefox with or
without the environment variable?

What is then the output of
  
  id
  klist
  snap run --shell firefox 'env|grep KRB; id; od ${KRB5CCNAME#FILE:}'

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1849346

Title:
  [SRU] kerberos GSSAPI no longer works after deb->snap transition

To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/1849346/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to