September 2020 - Sssd-maintainers - Fedora mailing-lists

[Bug 1850445] kinit switches servers after password change
by bugzilla＠redhat.com 24 Sep '20

24 Sep '20

https://bugzilla.redhat.com/show_bug.cgi?id=1850445 --- Comment #9 from François Cami <fcami(a)redhat.com> --- One failed run: http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/521a5fd… has that kdcinfo.$REALM file empty: INFO ipatests.pytest_ipa.integration.host.Host.master.IPAOpenSSHTransport:transport.py:391 RUN KRB5_TRACE=/dev/stdout kinit nonadmin DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:513 RUN KRB5_TRACE=/dev/stdout kinit nonadmin DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192214: Getting initial credentials for nonadmin(a)IPA.TEST DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192216: Sending unauthenticated request DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192217: Sending request (172 bytes) to IPA.TEST DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192218: Resolving hostname master.ipa.test DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192219: Initiating TCP connection to stream 192.168.122.106:88 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192220: Sending TCP request to stream 192.168.122.106:88 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192221: Received answer (496 bytes) from stream 192.168.122.106:88 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192222: Terminating TCP connection to stream 192.168.122.106:88 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192223: Response was from master KDC DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192224: Received error from KDC: -1765328359/Additional pre-authentication required DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192227: Preauthenticating using KDC method data DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192228: Processing preauth types: PA-PK-AS-REQ (16), PA-FX-FAST (136), PA-ETYPE-INFO2 (19), PA-PKINIT-KX (147), PA-SPAKE (151), PA-ENC-TIMESTAMP (2), PA_AS_FRESHNESS (150), PA-FX-COOKIE (133) DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192229: Selected etype info: etype aes256-cts, salt "R!;ANF.whlO2MsA]", params "" DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192230: Received cookie: MIT1\x00\x00\x00\x01\xa9W\x96\xfa\xaa:~\x80x\x07\xe3s\xa5e\x95\x15\x0d\xa9\xc4\xa4\x8bw\xb6\xfa\xff\xc0\xad>\xfd\xe0@\x85\xba\xe67\xa0\x91z\x1c\xd7\x1d\xe5\x9c\xb9\xe1\xe4b\x0f\x89g2\xc5JxVl~\xda\xa5\xb7^uQ\xc7i\x04\xde\x15v\xa8c\x01\xd6\xd4L\xb6\xaf\x08\xaa\xca\x9c\xaa\xcbe\xcd`N\xb1\xbcJ\x88"\xf0,x\x9dYv\xef\xd8^\xf2\x1c\xa6(\xc1\x9c8w&N\xdc\xcf\x91\xc7Dc6\xf9z\x09\x8d\x9c\xe0\x9e\xff\xd2\xefo\x17 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192231: PKINIT client has no configured identity; giving up DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192232: Preauth module pkinit (147) (info) returned: 0/Success DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192233: PKINIT client received freshness token from KDC DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192234: Preauth module pkinit (150) (info) returned: 0/Success DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192235: PKINIT client has no configured identity; giving up DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192236: Preauth module pkinit (16) (real) returned: 22/Invalid argument DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192237: SPAKE challenge received with group 1, pubkey 26E528056D2A8DA13EC403B64DF777B4B24CB70E8EF9ECDD8E4C19749ABCEF42 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 Password for nonadmin(a)IPA.TEST: DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192238: SPAKE key generated with pubkey 647A1BFAC43D0FCBDD1C23322589ACA1D977A6DC74B741827249D1BFFE2F773C DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192239: SPAKE algorithm result: 53231FC1FF68F4761CD6D90DDEAB2BA162CCF43A32428D07432C59168858A838 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192240: SPAKE final transcript hash: 7F8E20C8E83645406A86C1A359BC28195BC1D9C12A90E86F4854CF4486AC8C2E DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192241: Sending SPAKE response DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192242: Preauth module spake (151) (real) returned: 0/Success DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192243: Produced preauth for next request: PA-FX-COOKIE (133), PA-SPAKE (151) DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192244: Sending request (431 bytes) to IPA.TEST DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192245: Resolving hostname master.ipa.test DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192246: Initiating TCP connection to stream 192.168.122.106:88 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192247: Sending TCP request to stream 192.168.122.106:88 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192248: Received answer (1521 bytes) from stream 192.168.122.106:88 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192249: Terminating TCP connection to stream 192.168.122.106:88 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192250: Response was from master KDC DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192251: AS key determined by preauth: aes256-cts/48AA DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192252: Decrypted AS reply; session key is: aes256-cts/4F58 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192253: FAST negotiation: available DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192254: Initializing KCM:0 with default princ nonadmin(a)IPA.TEST DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192255: Storing nonadmin(a)IPA.TEST -> krbtgt/IPA.TEST(a)IPA.TEST in KCM:0 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192256: Storing config in KCM:0 for krbtgt/IPA.TEST(a)IPA.TEST: fast_avail: yes DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192257: Storing nonadmin(a)IPA.TEST -> krb5_ccache_conf_data/fast_avail/krbtgt\/IPA.TEST\@IPA.TEST@X-CACHECONF: in KCM:0 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192258: Storing config in KCM:0 for krbtgt/IPA.TEST(a)IPA.TEST: pa_type: 151 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:557 [23969] 1600937074.192259: Storing nonadmin(a)IPA.TEST -> krb5_ccache_conf_data/pa_type/krbtgt\/IPA.TEST\@IPA.TEST@X-CACHECONF: in KCM:0 DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:217 Exit code: 0 INFO ipatests.pytest_ipa.integration.tasks:tasks.py:2020 Collecting kdcinfo log from: master.ipa.test INFO ipatests.pytest_ipa.integration.host.Host.master.IPAOpenSSHTransport:transport.py:436 GET /var/lib/sss/pubconf/kdcinfo.IPA.TEST DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd68:transport.py:513 RUN ['cat', '/var/lib/sss/pubconf/kdcinfo.IPA.TEST'] DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd68:transport.py:557 cat: /var/lib/sss/pubconf/kdcinfo.IPA.TEST: No such file or directory DEBUG ipatests.pytest_ipa.integration.host.Host.master.cmd68:transport.py:217 Exit code: 1 -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug.

1 0

[Bug 1850445] kinit switches servers after password change
by bugzilla＠redhat.com 22 Sep '20

22 Sep '20

https://bugzilla.redhat.com/show_bug.cgi?id=1850445 François Cami <fcami(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1881630 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1881630 [Bug 1881630] ipatests-only: kinit_as_user should collect kdcinfo.REALM on failure -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug.

1 0

[Bug 1850445] kinit switches servers after password change
by bugzilla＠redhat.com 22 Sep '20

22 Sep '20

https://bugzilla.redhat.com/show_bug.cgi?id=1850445 --- Comment #8 from François Cami <fcami(a)redhat.com> --- ipatests PR to collect that kdcinfo file: https://github.com/freeipa/freeipa/pull/5128 -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug.

1 0

[Bug 1850445] kinit switches servers after password change
by bugzilla＠redhat.com 10 Sep '20

10 Sep '20

https://bugzilla.redhat.com/show_bug.cgi?id=1850445 Robbie Harwood <rharwood(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |atikhono(a)redhat.com, | |jhrozek(a)redhat.com, | |lslebodn(a)redhat.com, | |mzidek(a)redhat.com, | |pbrezina(a)redhat.com, | |sssd-maintainers(a)lists.fedo | |raproject.org Component|krb5 |sssd Assignee|rharwood(a)redhat.com |sssd-maintainers(a)lists.fedo | |raproject.org --- Comment #7 from Robbie Harwood <rharwood(a)redhat.com> --- Moving to sssd based on #c6. -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug.

1 0

[Bug 1572982] [abrt] sssd-kcm: talloc_abort(): sssd_kcm killed by SIGABRT
by bugzilla＠redhat.com 07 Sep '20

07 Sep '20

https://bugzilla.redhat.com/show_bug.cgi?id=1572982 --- Comment #19 from Alexey Tikhonov <atikhono(a)redhat.com> --- IIUC, this wasn't fixed yet (https://github.com/SSSD/sssd/issues/4733) -- You are receiving this mail because: You are the assignee for the bug.

1 0

[Bug 1572982] [abrt] sssd-kcm: talloc_abort(): sssd_kcm killed by SIGABRT
by bugzilla＠redhat.com 07 Sep '20

07 Sep '20

1 0

2024

2023

2022

2021

2020

Sssd-maintainers September 2020