fedora-infrastructure

#5662 cannot kinit
Closed Opened by sopos.

Closed
Reopen Issue

I need to build a new package of beakerlib for fedora but as Koji needs kerberos authentication I need to obtain a TGT first which does not work for me.

$ kinit sopos@FEDORAPROJECT.ORG -V
Using default cache: /tmp/krb5cc_1000
Using principal: sopos@FEDORAPROJECT.ORG
kinit: Cannot find KDC for realm "FEDORAPROJECT.ORG" while getting initial credentials

It looks like the DNS record for kerberos kdc is missing.

You probably have the Red Hat Internal krb5.conf file.
Please open your /etc/krb5.conf, and add "includedir /etc/krb5.conf.d/" as the first line, as they did not add that.
Edited by puiterwijk

(The problem is that the Red Hat Internal KRB5 config sets dns_lookup_kdc=false, which means the DNS autodetection doesn't work, and it removes the includedir, which means our config file gets ignored).
Edited by puiterwijk

You probably have the Red Hat Internal krb5.conf file.
Please open your /etc/krb5.conf, and add "includedir /etc/krb5.conf.d/" as the first line, as they did not add that.

You are completely right, this helped. Thanks!

@sopos changed the status to Closed
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.