Bug ID 1040951
Summary samba-krb-printing unable to get kerberos ticket
Classification openSUSE
Product openSUSE Distribution
Version Leap 42.2
Hardware x86-64
OS openSUSE 42.2
Status NEW
Severity Normal
Priority P5 - None
Component Samba
Assignee samba-maintainers@SuSE.de
Reporter gleixner@lrz.de
QA Contact samba-maintainers@SuSE.de
Found By ---
Blocker ---

The package samba-krb-printing starts smbspool as user to be able to get a
kerberos ticket for printing. Recent kerberos/winbind setup switched ticket
caching from directory based store to file based store. Therefore a environment
variable $KRB5CCNAME is set to "FILE:/tmp/krb5cc_[uid]". 
The get_printing_ticket.c clears the environment and this probably would unset
the $KRB5CCNAME, but this is not the problem. Switching user does not set up
the $KRB5CCNAME, only login via winbind sets it according to the setting of
"krb5_ccache_type" in /etc/security/pam_winbind.conf. I had to set it to FILE,
because DIR caused other problems.
So either get_printing_ticket.c has to parse/guess the krb5_ccache_type setting
or pam has to run through winbind on session setup when switching users.
Finally get_printing_ticket.c has to set the $KRB5CCNAME before starting
smbspool.


You are receiving this mail because: