#9220 krb5.releng.keytab is not working anymore
Closed: Fixed 3 years ago by kevin. Opened 3 years ago by mohanboddu.

Describe what you would like us to do:


krb5.releng.keytab is used in eln compose and it seems to be not valid anymore.

$ koji --profile=odcs_production hello
2020-08-11 13:26:24,308 [ERROR] koji: AuthError: unable to obtain a session

Please fix it and let us know how to do so, so that we can do it in future.

Thanks

cc @jkaluza

When do you need this to be done by? (YYYY/MM/DD)

ASAP


FYI, the principal for that keytab file is releng@FEDORAPROJECT.ORG

I think we have something similar in bodhi

Traceback (most recent call last):
  File "/usr/lib/python3.8/site-packages/requests_gssapi/compat.py", line 50, in generate_request_header
    self.creds = gssapi.Credentials(name=name, usage="initiate")
  File "/usr/lib64/python3.8/site-packages/gssapi/creds.py", line 63, in __new__
    res = cls.acquire(name, lifetime, mechs, usage,
  File "/usr/lib64/python3.8/site-packages/gssapi/creds.py", line 136, in acquire
    res = rcreds.acquire_cred(name, lifetime,
  File "gssapi/raw/creds.pyx", line 158, in gssapi.raw.creds.acquire_cred
gssapi.raw.misc.GSSError: Major (851968): Unspecified GSS failure.  Minor code may provide more information, Minor (2529639053): Can't find client principal bodhi\/bodhi.fedoraproject.org/fedoraproject.org@FEDORAPROJECT.ORG in cache collection
[2020-08-11 15:10:11,506: INFO/ForkPoolWorker-1] Backing off koji_login(...) for 119.7s (koji.AuthError: unable to obtain a session)

This is https://pagure.io/koji/issue/2422

TLDR: update koji AND python3-requests-gssapi (from f32-infra).

Let me know if that doesn't fix it.

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

3 years ago

This is fixed now. Thanks.

Login to comment on this ticket.

Metadata