http://bugzilla.novell.com/show_bug.cgi?id=1040951 Bug ID: 1040951 Summary: samba-krb-printing unable to get kerberos ticket Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: x86-64 OS: openSUSE 42.2 Status: NEW Severity: Normal Priority: P5 - None Component: Samba Assignee: samba-maintainers@SuSE.de Reporter: gleixner@lrz.de QA Contact: samba-maintainers@SuSE.de Found By: --- Blocker: --- The package samba-krb-printing starts smbspool as user to be able to get a kerberos ticket for printing. Recent kerberos/winbind setup switched ticket caching from directory based store to file based store. Therefore a environment variable $KRB5CCNAME is set to "FILE:/tmp/krb5cc_[uid]". The get_printing_ticket.c clears the environment and this probably would unset the $KRB5CCNAME, but this is not the problem. Switching user does not set up the $KRB5CCNAME, only login via winbind sets it according to the setting of "krb5_ccache_type" in /etc/security/pam_winbind.conf. I had to set it to FILE, because DIR caused other problems. So either get_printing_ticket.c has to parse/guess the krb5_ccache_type setting or pam has to run through winbind on session setup when switching users. Finally get_printing_ticket.c has to set the $KRB5CCNAME before starting smbspool. -- You are receiving this mail because: You are on the CC list for the bug.