> I didn't test AD joined via SSSD.
> I've only tested with our `/etc/krb5.conf.d/COMPANY.conf`.

Do you run kinit? If you run it, the ticket file is written, but from
your comments there is supposed to be no ticket file available at all at
the point the browser is started. But then I don't understand how it
goes from there.

I'm looking at krb5 and judging by the debug messages I think you're
getting to this branch of ccfns.c:

--->
krb5_error_code
k5_cc_store_primary_cred(krb5_context context, krb5_ccache cache,
                         krb5_creds *creds)
{
    krb5_error_code ret;

    /* Write a start realm if we're writing a TGT and the client realm isn't
     * the same as the TGS realm. */
<---

Does the comment represent your use case?

> Would it be helpful for me to create a private bug with a PCAP or HAR
file showing the unobscured details?

I don't think so, at least for now, I think our test cases are diverging
on the initializing phase so let's clarify that first.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2138268

Title:
  Kerberos authentication slow in Firefox (snap) and Chromium (snap)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/2138268/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to