fedora-infrastructure

#5615 Kerberos authentication failed: Server not found in Kerberos database (-1765328377)
Closed: Fixed Opened by jsynacek.

Closed: Fixed
Reopen Issue

I know that this has been mentioned in the FAQ, but the "fix" mentioned there doesn't work for me.

0) I have a default /etc/krb5.conf

1) $ cat /etc/krb5.conf.d/fedoraproject_org
[realms]
FEDORAPROJECT.COM = {
kdc = https://id.fedoraproject.org/KdcProxy
}
[domain_realm]
.fedoraproject.org = FEDORAPROJECT.ORG
fedoraproject.org = FEDORAPROJECT.ORG

2) kinit jsynacek@FEDORAPROJECT.ORG

3)$ klist -A
Ticket cache: KEYRING:persistent:17912:17912
Default principal: jsynacek@FEDORAPROJECT.ORG

Valid starting Expires Service principal
12/12/2016 12:51:02 12/13/2016 12:46:14 HTTP/id.fedoraproject.org@FEDORAPROJECT.ORG
renew until 12/19/2016 12:46:14
12/12/2016 12:46:21 12/13/2016 12:46:14 krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG
renew until 12/19/2016 12:46:14

4) kswitch -p jsynacek@FEDORAPROJECT.ORG # Just for good measure, shouldn't be needed.

5) $ koji build --scratch f26 $(fedpkg giturl)
Your git configuration does not use a namespace.
Consider updating your git configuration by running:
git remote set-url origin ssh://jsynacek@pkgs.fedoraproject.org/rpms/emacs
Warning: no configuration for profile name: koji
Kerberos authentication failed: Server not found in Kerberos database (-1765328377)

Can you do:

KRB5_TRACE=/dev/stdout koji -d --debug-xmlrpc --scratch f26 $(fedpkg giturl)

and give us the output back here?

Thanks.

 
$ KRB5_TRACE=/dev/stdout koji -d --debug-xmlrpc build --scratch f26 $(fedpkg giturl)
Your git configuration does not use a namespace.
Consider updating your git configuration by running:
  git remote set-url origin ssh://jsynacek@pkgs.fedoraproject.org/rpms/emacs
Warning: no configuration for profile name: koji
[9684] 1481620233.388682: Getting credentials jsynacek@FEDORAPROJECT.ORG -> host/localhost.localdomain@FEDORAPROJECT.ORG using ccache KEYRING:persistent:17912:17912
[9684] 1481620233.388749: Retrieving jsynacek@FEDORAPROJECT.ORG -> host/localhost.localdomain@FEDORAPROJECT.ORG from KEYRING:persistent:17912:17912 with result: -1765328243/Matching credential not found
[9684] 1481620233.388774: Retrieving jsynacek@FEDORAPROJECT.ORG -> krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG from KEYRING:persistent:17912:17912 with result: 0/Success
[9684] 1481620233.388779: Starting with TGT for client realm: jsynacek@FEDORAPROJECT.ORG -> krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG
[9684] 1481620233.388784: Requesting tickets for host/localhost.localdomain@FEDORAPROJECT.ORG, referrals on
[9684] 1481620233.388798: Generated subkey for TGS request: aes256-cts/C450
[9684] 1481620233.388838: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
[9684] 1481620233.388893: Encoding request body and padata into FAST request
[9684] 1481620233.388946: Sending request (990 bytes) to FEDORAPROJECT.ORG
[9684] 1481620233.435238: Resolving hostname id.fedoraproject.org.
[9684] 1481620233.478661: Initiating TCP connection to stream 2604:1580:fe00:0:dead:beef:cafe:fed1:1088
[9684] 1481620233.480016: Terminating TCP connection to stream 2604:1580:fe00:0:dead:beef:cafe:fed1:1088
[9684] 1481620233.480141: Initiating TCP connection to stream 2607:f188::dead:beef:cafe:fed1:1088
[9684] 1481620233.481340: Terminating TCP connection to stream 2607:f188::dead:beef:cafe:fed1:1088
[9684] 1481620233.481414: Initiating TCP connection to stream 2610:28:3090:3001:dead:beef:cafe:fed3:1088
[9684] 1481620233.483259: Terminating TCP connection to stream 2610:28:3090:3001:dead:beef:cafe:fed3:1088
[9684] 1481620233.483412: Initiating TCP connection to stream 209.132.181.15:1088
[9684] 1481620233.660939: Sending TCP request to stream 209.132.181.15:1088
[9684] 1481620233.841690: Received answer (508 bytes) from stream 209.132.181.15:1088
[9684] 1481620233.841707: Terminating TCP connection to stream 209.132.181.15:1088
[9684] 1481620233.864708: Response was not from master KDC
[9684] 1481620233.864792: Decoding FAST response
[9684] 1481620233.864862: TGS request result: -1765328377/Server host/localhost.localdomain@FEDORAPROJECT.ORG not found in Kerberos database
[9684] 1481620233.864872: Requesting tickets for host/localhost.localdomain@FEDORAPROJECT.ORG, referrals off
[9684] 1481620233.864890: Generated subkey for TGS request: aes256-cts/7F80
[9684] 1481620233.864920: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
[9684] 1481620233.864966: Encoding request body and padata into FAST request
[9684] 1481620233.865007: Sending request (990 bytes) to FEDORAPROJECT.ORG
[9684] 1481620233.910659: Resolving hostname id.fedoraproject.org.
[9684] 1481620233.933841: Initiating TCP connection to stream 2607:f188::dead:beef:cafe:fed1:1088
[9684] 1481620233.935241: Terminating TCP connection to stream 2607:f188::dead:beef:cafe:fed1:1088
[9684] 1481620233.935349: Initiating TCP connection to stream 2610:28:3090:3001:dead:beef:cafe:fed3:1088
[9684] 1481620233.936537: Terminating TCP connection to stream 2610:28:3090:3001:dead:beef:cafe:fed3:1088
[9684] 1481620233.936639: Initiating TCP connection to stream 2604:1580:fe00:0:dead:beef:cafe:fed1:1088
[9684] 1481620233.937822: Terminating TCP connection to stream 2604:1580:fe00:0:dead:beef:cafe:fed1:1088
[9684] 1481620233.937866: Initiating TCP connection to stream 66.35.62.162:1088
[9684] 1481620234.91816: Sending TCP request to stream 66.35.62.162:1088
[9684] 1481620234.317475: Received answer (508 bytes) from stream 66.35.62.162:1088
[9684] 1481620234.317512: Terminating TCP connection to stream 66.35.62.162:1088
[9684] 1481620234.340688: Response was not from master KDC
[9684] 1481620234.340748: Decoding FAST response
[9684] 1481620234.340816: TGS request result: -1765328377/Server host/localhost.localdomain@FEDORAPROJECT.ORG not found in Kerberos database
Kerberos authentication failed: Server not found in Kerberos database (-1765328377)

Do you by chance have a /etc/koji.conf.rpmnew file? If so, can you replace /etc/koji.conf with it?

Failing that do you have a ~/.koji/config file? If so, can you move it aside?

No to both questions. I did have a company-specific config in /etc/koji.conf.d/ though, but removing it still produces the same error.

Can you attach your /etc/koji.conf file?

Also what version of koji package do you have? rpm -q koji ?

You should have: 

authtype = kerberos
krb_rdns = false

at the end of /etc/koji.conf (and it seems the lack of the last line there is the problem...

Well, the koji config issues here go further:
for host/localhost.localdomain@FEDORAPROJECT.ORG

That would indicate it hasn't even loaded a single part of the koji config.

IT also says so: "Warning: no configuration for profile name: koji"

So the problem was that I had no /etc/koji.conf at all. After reinstalling the package and with the default /etc/koji.conf, I can now build the srpm. I had no idea that koji required the config to be there and had no defaults... From my point of view, that's a bug.

Thank you for the help.

Feel free to file a bug on koji for that case.

I'll go ahead and close this ticket now, let us know if there is anything else we can do for you.

:triangular_ruler:

@kevin changed the status to Closed
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.