> One of the reasons we see slowness and you might not is the number of KDCs we
> have in our REALM. Is your test REALM a single server?

Guilty as charged.

I'll tell you what: If you are able to confirm that changing

  /var/lib/snapd/hostfs/tmp/krb5cc* rk,

to

  /var/lib/snapd/hostfs/tmp/krb5cc* rka,

in /var/lib/snapd/apparmor/profiles/snap.firefox.firefox and then reloading the
profile with

  apparmor_parser -r
/var/lib/snapd/apparmor/profiles/snap.firefox.firefox

and then starting Firefox solves your problem, I'll open a merge request to
include that permission in the kerberos-tickets interface even without a full
test case, as creating one including Kerberos with multiple servers is just
too much and your case is very much well described and I also have the krb5's
source to point at.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2138268

Title:
  Kerberos authentication slow in Firefox (snap) and Chromium (snap)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/2138268/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to