How are you enabling that Firefox logging? I don't ever see those lines with NSPR_LOG_MODULES=negotiateauth:5.
What I verified is that, for any case (i.e. AD joined via SSSD or manual kinit) the Apparmor denials happen every time I reload (without cache) the page behind Kerberos, and this is the negotiateauth log: [Parent 4928: Main Thread]: D/negotiateauth service = adc.testdomain.com [Parent 4928: Main Thread]: D/negotiateauth using negotiate-gss [Parent 4928: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::nsAuthGSSAPI() [Parent 4928: Main Thread]: D/negotiateauth Attempting to load gss functions [Parent 4928: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::Init() [Parent 4928: BgIOThreadPool #1]: D/negotiateauth nsHttpNegotiateAuth::GenerateCredentials() [challenge=Negotiate] [Parent 4928: BgIOThreadPool #1]: D/negotiateauth entering nsAuthGSSAPI::GetNextToken() [Parent 4928: BgIOThreadPool #1]: D/negotiateauth leaving nsAuthGSSAPI::GetNextToken [rv=0] [Parent 4928: BgIOThreadPool #1]: D/negotiateauth Sending a token of length 1556 [Parent 4928: Main Thread]: D/negotiateauth service = adc.testdomain.com [Parent 4928: Main Thread]: D/negotiateauth using negotiate-gss [Parent 4928: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::nsAuthGSSAPI() [Parent 4928: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::Init() [Parent 4928: BgIOThreadPool #2]: D/negotiateauth nsHttpNegotiateAuth::GenerateCredentials() [challenge=Negotiate] [Parent 4928: BgIOThreadPool #2]: D/negotiateauth entering nsAuthGSSAPI::GetNextToken() [Parent 4928: BgIOThreadPool #2]: D/negotiateauth leaving nsAuthGSSAPI::GetNextToken [rv=0] [Parent 4928: BgIOThreadPool #2]: D/negotiateauth Sending a token of length 1555 So I'm struggling to find a difference between them. Could you please clarify? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2138268 Title: Kerberos authentication slow in Firefox (snap) and Chromium (snap) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/2138268/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
