** Changed in: krb5 (Ubuntu Oneiric) Status: Triaged => In Progress
** Changed in: krb5 (Ubuntu Oneiric) Assignee: (unassigned) => Steve Langasek (vorlon) ** Description changed: + SRU justification: + krb5 1.9.1 breaks interoperability with older KDCs. If you have a Kerberos realm with one of these older KDCs that does not implement the "canonicalize" option, oneiric's will be unusable as a Kerberos client for this realm. + See RedHat bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=713518. Quoting: Certain versions of the KDC software (included for example in Red Hat Enterprise Linux 2.1 and 3) reject requests, which include KDC options the software does not recognize, and do not support the "canonicalize" option. When a client was configured to use one of these versions of the KDC software, the client failed to obtain credentials for authentication to other services. This interoperability regression was introduced in the update to Red Hat Enterprise Linux 6.1. With this update, an upstream patch has been provided to fix this bug. I have applied the patch provided on this bugzilla page, and this fixed the problem. ProblemType: Bug DistroRelease: Ubuntu 11.10 Package: libkrb5-3 1.9.1+dfsg-1ubuntu1 ProcVersionSignature: Ubuntu 3.0.0-12.20-generic-pae 3.0.4 Uname: Linux 3.0.0-12-generic-pae i686 NonfreeKernelModules: nvidia ApportVersion: 1.23-0ubuntu3 Architecture: i386 Date: Fri Oct 14 15:56:20 2011 InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Release i386 (20110427.1) SourcePackage: krb5 UpgradeStatus: Upgraded to oneiric on 2011-10-13 (0 days ago) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/874130 Title: Canonicalize fallback only works for different realm (MITKRB RT #6917) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/874130/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs