#3757 Kerberos with sssd-kcm is not working on s390x
Closed: Fixed 5 years ago Opened 5 years ago by sbose.

When krb5 is set up with sssd-kcm build from current sssd master branch on s390x machines it does not display and handle tickets properly.

Steps to Reproduce:

# KRB5_TRACE=/dev/stderr kinit alice
[7308] 1527883608.655712: Getting initial credentials for alice@ZMRAZ.COM
[7308] 1527883608.655714: Sending request (186 bytes) to ZMRAZ.COM
[7308] 1527883608.655715: Resolving hostname ibm-z-66.rhts.eng.bos.redhat.com
[7308] 1527883608.655716: Sending initial UDP request to dgram 2620:52:0:1040:de:adff:febe:ef42:88
[7308] 1527883608.655717: Received answer (691 bytes) from dgram 2620:52:0:1040:de:adff:febe:ef42:88
[7308] 1527883608.655718: Response was not from master KDC
[7308] 1527883608.655719: Processing preauth types: 19
[7308] 1527883608.655720: Selected etype info: etype aes256-cts, salt "ZMRAZ.COMalice", params ""
[7308] 1527883608.655721: Produced preauth for next request: (empty)
[7308] 1527883608.655722: Getting AS key, salt "ZMRAZ.COMalice", params ""
Password for alice@ZMRAZ.COM: 
[7308] 1527883610.107787: AS key obtained from gak_fct: aes256-cts/C609
[7308] 1527883610.107788: Decrypted AS reply; session key is: aes256-cts/B3E6
[7308] 1527883610.107789: FAST negotiation: available
[7308] 1527883610.107790: Initializing KCM:0 with default princ alice@ZMRAZ.COM
[7308] 1527883610.107791: Storing alice@ZMRAZ.COM -> krbtgt/ZMRAZ.COM@ZMRAZ.COM in KCM:0
[7308] 1527883610.107792: Storing config in KCM:0 for krbtgt/ZMRAZ.COM@ZMRAZ.COM: fast_avail: yes
[7308] 1527883610.107793: Storing @ZMRAZ.COM -> krb5_ccache_conf_data/fast_avail/krbtgt\/ZMRAZ.COM\@ZMRAZ.COM@X-CACHECONF: in KCM:0
#
# klist 
Ticket cache: KCM:0
Default principal: @ZMRAZ.COM

Valid starting       Expires              Service principal
06/01/2018 16:06:48  06/02/2018 16:06:48  krbtgt/ZMRAZ.COM@ZMRAZ.COM
    for client alice@ZMRAZ.COM

^^^^ Note the missing principal name in line with "Default principal"!


Metadata Update from @sbose:
- Issue assigned to sbose

5 years ago

Commit 6191cf8 relates to this ticket

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
- Issue tagged with: bug

5 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4763

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata