@Nathan - I was testing this today on Ubuntu 26.04 for one of the other
bugs we worked on, and I still have to comment out the line in
`/etc/krb5.conf.d/enable_sssd_conf_dir`

`snapd --version` reports 2.75.2
apparmor is 5.0.0~beta1-0ubuntu7 based on apt output.

If we look in "/etc/apparmor.d/abstractions/kerberosclient", we see this:
```
  # Path included by configuration file installed by SSSD
  /var/lib/sss/pubconf/krb5.include.d/   r,
  /var/lib/sss/pubconf/krb5.include.d/*  r,
```

But in `/var/lib/snapd/apparmor/profiles/snap.firefox.firefox`, we don't
see any lines like that.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2122317

Title:
  Unreadable includedir /var/lib/sss/pubconf/krb5.include.d/ causes
  Kerberos authentication failure

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2122317/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to