Mailinglist Archive: opensuse-bugs (4790 mails)

< Previous Next >
[Bug 1040951] samba-krb-printing unable to get kerberos ticket
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Tue, 04 Jul 2017 11:16:42 +0000
  • Message-id: <bug-1040951-21960-UCfpOLEnk3@http.bugzilla.suse.com/>
http://bugzilla.suse.com/show_bug.cgi?id=1040951
http://bugzilla.suse.com/show_bug.cgi?id=1040951#c10

Samuel Cabrero <scabrero@xxxxxxxx> changed:

What |Removed |Added
----------------------------------------------------------------------------
Flags| |needinfo?(gleixner@xxxxxx)

--- Comment #10 from Samuel Cabrero <scabrero@xxxxxxxx> ---
Hi Flo,

is your /etc/krb5.conf empty on purpose?

According to your pam_winbind.conf, winbind is configured to request a FILE
credentials cache storage. You can verify where your credential cache is in the
klist output:

Ticket cache: FILE:/tmp/krb5cc_54400

When get_print_ticket is called, after clearing the environment and setting the
uid, it tries to determine where the credential cache is. The default
credential cache name is determined by the following, in descending order of
priority:
- The KRB5CCNAME environment variable (Does not apply as environment is
cleared).
- The default_ccache_name profile variable in [libdefaults] (Does not apply as
your file is empty)
- The hardcoded default, DEFCCNAME

So you are using the hardcoded default, which is
DEFCCNAME='DIR:/run/user/%{uid}/krb5cc', and I can reproduce the issue by
commenting the default_ccache_name setting on my krb5.conf.

You need to set (at least) in /etc/krb5.conf:

[libdefaults]
default_ccache_name = FILE:/tmp/krb5cc_%{uid}

--
You are receiving this mail because:
You are on the CC list for the bug.
< Previous Next >