#3757 Kerberos with sssd-kcm is not working on s390x
Closed: Fixed Opened by sbose.

When krb5 is set up with sssd-kcm build from current sssd master branch on s390x machines it does not display and handle tickets properly.

Steps to Reproduce:

# KRB5_TRACE=/dev/stderr kinit alice
[7308] 1527883608.655712: Getting initial credentials for alice@ZMRAZ.COM
[7308] 1527883608.655714: Sending request (186 bytes) to ZMRAZ.COM
[7308] 1527883608.655715: Resolving hostname ibm-z-66.rhts.eng.bos.redhat.com
[7308] 1527883608.655716: Sending initial UDP request to dgram 2620:52:0:1040:de:adff:febe:ef42:88
[7308] 1527883608.655717: Received answer (691 bytes) from dgram 2620:52:0:1040:de:adff:febe:ef42:88
[7308] 1527883608.655718: Response was not from master KDC
[7308] 1527883608.655719: Processing preauth types: 19
[7308] 1527883608.655720: Selected etype info: etype aes256-cts, salt "ZMRAZ.COMalice", params ""
[7308] 1527883608.655721: Produced preauth for next request: (empty)
[7308] 1527883608.655722: Getting AS key, salt "ZMRAZ.COMalice", params ""
Password for alice@ZMRAZ.COM: 
[7308] 1527883610.107787: AS key obtained from gak_fct: aes256-cts/C609
[7308] 1527883610.107788: Decrypted AS reply; session key is: aes256-cts/B3E6
[7308] 1527883610.107789: FAST negotiation: available
[7308] 1527883610.107790: Initializing KCM:0 with default princ alice@ZMRAZ.COM
[7308] 1527883610.107791: Storing alice@ZMRAZ.COM -> krbtgt/ZMRAZ.COM@ZMRAZ.COM in KCM:0
[7308] 1527883610.107792: Storing config in KCM:0 for krbtgt/ZMRAZ.COM@ZMRAZ.COM: fast_avail: yes
[7308] 1527883610.107793: Storing @ZMRAZ.COM -> krb5_ccache_conf_data/fast_avail/krbtgt\/ZMRAZ.COM\@ZMRAZ.COM@X-CACHECONF: in KCM:0
#
# klist 
Ticket cache: KCM:0
Default principal: @ZMRAZ.COM
Valid starting       Expires              Service principal
06/01/2018 16:06:48  06/02/2018 16:06:48  krbtgt/ZMRAZ.COM@ZMRAZ.COM
    for client alice@ZMRAZ.COM

^^^^ Note the missing principal name in line with "Default principal"!


Metadata Update from @sbose:
- Issue assigned to sbose

Commit 6191cf81 relates to this ticket

  • master: 6191cf81d78cfff3140975734a7e1afbcd484f30

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
- Issue tagged with: bug

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4763

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata