https://bugzilla.novell.com/show_bug.cgi?id=712448 https://bugzilla.novell.com/show_bug.cgi?id=712448#c1 Jiří Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |pavel@argo-tours.ru --- Comment #1 from Jiří Suchomel 2011-08-26 08:03:07 UTC --- What do these commands show: dig TXT _kerberos.%1 +short dig SRV _kerberos._udp.%1 +short (where %1 is your default domain)? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=712448 https://bugzilla.novell.com/show_bug.cgi?id=712448#c3 --- Comment #3 from Jiří Suchomel 2011-08-29 12:52:03 UTC --- Created an attachment (id=448190) --> (http://bugzilla.novell.com/attachment.cgi?id=448190) patch for /usr/share/YaST2/modules/Kerberos.ycp I see, I did not expect more lines in the output. Please try to patch your /usr/share/YaST2/modules/Kerberos.ycp with this patch ('patch /usr/share/YaST2/modules/Kerberos.ycp < patch_from_here'), than call 'ycpc -c /usr/share/YaST2/modules/Kerberos.ycp' and try again. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=712448 https://bugzilla.novell.com/show_bug.cgi?id=712448#c4 Pavel Baranchikov changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|pavel@argo-tours.ru | --- Comment #4 from Pavel Baranchikov 2011-08-29 13:52:33 UTC --- For now, my "use DNS to configure Kerberos" checkbox is disabled for both original Kerberos.ycp and patched. Maybe, it is due to existing config file? Is there a way to reset config file to YAST-compatible format. On other computer, patch did the job and wrote the correct /etc/krb5.conf file. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=712448 https://bugzilla.novell.com/show_bug.cgi?id=712448#c6 --- Comment #6 from Pavel Baranchikov 2011-08-31 07:46:11 UTC --- I have deleted all the contents of the /etc/krb5.conf, so it became empty file. "Use DNS" is not active. I have cleaned krb5.conf from my domain info: pbaranchikov:/etc # cat /etc/krb5.conf [libdefaults] clockskew = 300 [realms] # EXAMPLE.COM = { # kdc = kerberos.example.com # admin_server = kerberos.example.com # } [logging] kdc = FILE:/var/log/krb5/krb5kdc.log admin_server = FILE:/var/log/krb5/kadmind.log default = SYSLOG:NOTICE:DAEMON [appdefaults] pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false minimum_uid = 1 clockskew = 300 external = sshd use_shmem = sshd } pbaranchikov:/etc # "Use DNS" checkbox left unavailable. Would you please add a button to rewrite the system krb5.conf file contents? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=712448 https://bugzilla.novell.com/show_bug.cgi?id=712448#c8 Pavel Baranchikov changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|pavel@argo-tours.ru | --- Comment #8 from Pavel Baranchikov 2011-08-31 11:41:49 UTC --- Created an attachment (id=448641) --> (http://bugzilla.novell.com/attachment.cgi?id=448641) y2log after executing yast2 kerberos-client -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=712448 https://bugzilla.novell.com/show_bug.cgi?id=712448#c10 Pavel Baranchikov changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|pavel@argo-tours.ru | --- Comment #10 from Pavel Baranchikov 2011-08-31 13:50:13 UTC --- No, other machine does the same. Full kerberos (and DNS) domain name is ryazan.aleatis.lan -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=712448 https://bugzilla.novell.com/show_bug.cgi?id=712448#c12 --- Comment #12 from Pavel Baranchikov 2011-09-02 07:51:52 UTC --- I do not understand all the mechanisms of the determining the fqdn, but with the config, mentioned in comment #6, the real kerberos realm is discovered correctly, with the domain name, gathered from the DHCP. Maybe, they use /etc/resolv.conf instead of hostname --fqdn? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=712448 https://bugzilla.novell.com/show_bug.cgi?id=712448#c13 Jiří Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |mvidner@suse.com --- Comment #13 from Jiří Suchomel 2011-09-02 09:25:49 UTC --- hostname --fqdn reports 'pbaranchikov.aleatis' but you say that DNS domain name is ryazan.aleatis.lan Because of this setup, Kerberos cannot properly find KDC. Martin, any idea what's the problem with network setup? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=712448 https://bugzilla.novell.com/show_bug.cgi?id=712448#c15 Jiří Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #15 from Jiří Suchomel 2011-09-02 14:09:27 UTC --- Well, to me it seems that your network config is somehow broken. If YaST caused it, please file a new bug report against network configuration. This one, regarding detecting Kerberos DNS config, is IMHO fixed by patch from comment 3, assuming correct network config. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.