the required information:
# dpkg -l | grep krb5
ii krb5-config 2.7ubuntu1
all Configuration files for Kerberos Version 5
ii krb5-locales 1.22.1-2ubuntu4
all internationalization support for MIT Kerberos
ii krb5-user 1.22.1-2ubuntu4
amd64 basic programs to authenticate using MIT Kerberos
ii libgssapi-krb5-2:amd64 1.22.1-2ubuntu4
amd64 MIT Kerberos runtime libraries - krb5 GSS-API
Mechanism
ii libkrb5-3:amd64 1.22.1-2ubuntu4
amd64 MIT Kerberos runtime libraries
ii libkrb5support0:amd64 1.22.1-2ubuntu4
amd64 MIT Kerberos runtime libraries - Support library
ii sssd-krb5 2.12.0-1ubuntu5
amd64 System Security Services Daemon -- Kerberos back end
ii sssd-krb5-common 2.12.0-1ubuntu5
amd64 System Security Services Daemon -- Kerberos helpers
$ klist
Ticketzwischenspeicher: FILE:/tmp/krb5cc_596628209_q0iV2f
Standard-Principal: [email protected]
Valid starting Expires Service principal
12.05.2026 15:14:52 13.05.2026 01:14:52 krbtgt/[email protected]
erneuern bis 13.05.2026 15:14:51
$ KRB5_TRACE=/dev/stderr NSPR_LOG_MODULES=negotiateauth:5 firefox
Gtk-Message: 15:18:52.340: Not loading module "atk-bridge": The functionality
is provided by GTK natively. Please try to not load it.
[Parent 39649: Main Thread]: D/negotiateauth service = sub.domain.de
[Parent 39649: Main Thread]: D/negotiateauth using negotiate-gss
[Parent 39649: Main Thread]: D/negotiateauth entering
nsAuthGSSAPI::nsAuthGSSAPI()
[Parent 39649: Main Thread]: D/negotiateauth Attempting to load gss functions
[Parent 39649: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::Init()
[Parent 39649: BgIOThreadPool #2]: D/negotiateauth
nsHttpNegotiateAuth::GenerateCredentials() [challenge=Negotiate]
[Parent 39649: BgIOThreadPool #2]: D/negotiateauth entering
nsAuthGSSAPI::GetNextToken()
[Parent 39649: BgIOThreadPool #2]: D/negotiateauth gss_init_sec_context()
failed: Unspecified GSS failure. Minor code may provide more information
SPNEGO cannot find mechanisms to negotiate
[Parent 39649: BgIOThreadPool #2]: D/negotiateauth leaving
nsAuthGSSAPI::GetNextToken [rv=80004005]
[Parent 39649: Main Thread]: D/negotiateauth service = sub.domain.de
[Parent 39649: Main Thread]: D/negotiateauth using negotiate-gss
[Parent 39649: Main Thread]: D/negotiateauth entering
nsAuthGSSAPI::nsAuthGSSAPI()
[Parent 39649: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::Init()
[Parent 39649: BgIOThreadPool #2]: D/negotiateauth
nsHttpNegotiateAuth::GenerateCredentials() [challenge=Negotiate]
[Parent 39649: BgIOThreadPool #2]: D/negotiateauth entering
nsAuthGSSAPI::GetNextToken()
[Parent 39649: BgIOThreadPool #2]: D/negotiateauth gss_init_sec_context()
failed: Unspecified GSS failure. Minor code may provide more information
SPNEGO cannot find mechanisms to negotiate
I log in via gdm, which then automatically generates or updates the
ticket(SSSD). I do not manually create or update tickets. the
ticketsystem works fine. other services work well with sso as well as
the edge browser for example. In Ubuntu 24.04 everything works also
well.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2152233
Title:
Snap Firefox breaks SSO again in Ubuntu 26.04
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/2152233/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
