Re https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/1849346/comments/13
This seems like it probably affects Thunderbird. Running Thunderbird
installed via Nix, I can connect to SMTP and IMAP servers using GSSAPI.
When I run it from the snap with the same profile, Thunderbird fails to
connect to the servers and I get:
$ env KRB5_TRACE=/dev/stderr MOZ_LOG=negotiateauth:5 thunderbird
2025/11/03 18:35:50.139792 cmd_run.go:1415: WARNING: will not expose Kerberos
tickets' path: Unsupported KRB5CCNAME: DIR:/tmp/krb5cc_1000_dir_uYVD8TjW95
Gtk-Message: 18:35:50.273: Not loading module "atk-bridge": The functionality
is provided by GTK natively. Please try to not load it.
[GFX1-]: glxtest: libpci missing
[Parent 3041667: IMAP]: D/negotiateauth entering nsAuthGSSAPI::nsAuthGSSAPI()
[Parent 3041667: IMAP]: D/negotiateauth Attempting to load gss functions
[Parent 3041667: IMAP]: D/negotiateauth entering nsAuthGSSAPI::Init()
[Parent 3041667: IMAP]: D/negotiateauth entering nsAuthGSSAPI::GetNextToken()
[Parent 3041667: IMAP]: D/negotiateauth gss_init_sec_context() failed: No
credentials were supplied, or the credentials were unavailable or inaccessible
No Kerberos credentials available (default cache:
DIR:/tmp/krb5cc_1000_dir_uYVD8TjW95)
Admittedly I tried moving the cache under /run as mentioned in the initial
comment, which produced
$ KRB5CCNAME=FILE:/run/user/1000/krbcc KRB5_TRACE=/dev/stderr
MOZ_LOG=negotiateauth:5 thunderbird
2025/11/03 18:49:16.693836 cmd_run.go:1415: WARNING: will not expose Kerberos
tickets' path: Unsupported KRB5CCNAME: FILE:/run/user/1000/krbcc
Gtk-Message: 18:49:16.946: Not loading module "atk-bridge": The functionality
is provided by GTK natively. Please try to not load it.
[GFX1-]: glxtest: libpci missing
[Parent 3057217: IMAP]: D/negotiateauth entering nsAuthGSSAPI::nsAuthGSSAPI()
[Parent 3057217: IMAP]: D/negotiateauth Attempting to load gss functions
[Parent 3057217: IMAP]: D/negotiateauth entering nsAuthGSSAPI::Init()
[Parent 3057217: IMAP]: D/negotiateauth entering nsAuthGSSAPI::GetNextToken()
[Parent 3057217: IMAP]: D/negotiateauth gss_init_sec_context() failed: No
credentials were supplied, or the credentials were unavailable or inaccessible
No Kerberos credentials available: Credentials cache permissions incorrect
(filename: /run/user/1000/krbcc)
so it's possible there's a more fundamental problem.
If there's anything else that would be useful for me to test LMK -- I
didn't entirely follow this ticket.
** Also affects: thunderbird (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1849346
Title:
[SRU] kerberos GSSAPI no longer works after deb->snap transition
To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/1849346/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
