fedora-infrastructure

#6400 Cannot kinit from stg Kerberos KDC
Closed: Fixed Opened by cqi.

Closed: Fixed
Reopen Issue

Get error kinit: Cannot contact any KDC for realm 'STG.FEDORAPROJECT.ORG' while getting initial credentials

Config content is

$ cat /etc/krb5.conf.d/stg_fedoraproject_org
[realms]
 STG.FEDORAPROJECT.ORG = {
        kdc = https://id.stg.fedoraproject.org/KdcProxy
 }
[domain_realm]
 .stg.fedoraproject.org = STG.FEDORAPROJECT.ORG
 stg.fedoraproject.org = STG.FEDORAPROJECT.ORG

Confirmed. I can't perform that stg kinit either.

Perhaps related - I also can't seem to login to other staging services via openid or openidc. For instance, logging in to https://badges.stg.fedoraproject.org/ fails (ipsilon doesn't seem to recognize my credentials).

This is caused by the staging renumbering probably.

Oh, looks like staging FAS is down: https://admin.stg.fedoraproject.org/accounts

@puiterwijk explained in #fedora-admin that the staging hosts are having their IPs moved.

FAS was in the process of moving but couldn't finish due to some other requirements. Known issue, being worked on.

Oh - FAS is back.

And... I can complete an ipsilon flow from badges.stg.fp.o now.

But, it looks like stg krb is still giving an error for me:

~❯ kinit ralph@STG.FEDORAPROJECT.ORG                    
kinit: Cannot contact any KDC for realm 'STG.FEDORAPROJECT.ORG' while getting initial credentials

That was caused by a race condition in IPA, and is fixed now.

Metadata Update from @puiterwijk:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.