There's no change with 'a', and I see the below in journalctl while
loading the page:
Jan 30 09:15:19 REDACTED kernel: audit: type=1400
audit(1769789719.396:1544): apparmor="DENIED" operation="file_lock"
class="file" profile="snap.firefox.firefox"
name="/var/lib/snapd/hostfs/tmp/krb5cc_1000" pid=364628
comm=4267494F5468727E506F6F6C202338 requested_mask="w" denied_mask="w"
fsuid=1000 ouid=1000
If I instead, change it to 'w', the error in journalctl disappears and
refreshes of the page are near instantaneous.
And looking in `klist` we can now see the service ticket when only
Firefox has loaded the website:
$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: REDACTED@REDACTED
Valid starting Expires Service principal
01/30/2026 09:03:21 01/30/2026 19:03:21
krbtgt/[email protected]
renew until 01/31/2026 09:03:15
01/30/2026 09:22:56 01/30/2026 19:03:21
HTTP/[email protected]
renew until 01/31/2026 09:03:15
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2138268
Title:
Kerberos authentication slow in Firefox (snap) and Chromium (snap)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/2138268/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
