freeipa

#5296 GSS failure after ipa-restore
Closed: Fixed Opened by mbasti.

Closed: Fixed
Reopen Issue

I'm getting following failure after ipa-restore

ipa: ERROR: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Decrypt integrity check failed)

Steps to reproduce:
1. install IPA
1. backup
1. uninstall IPA
1. install IPA
1. restore
1. kinit admin
1. ipa user-find (FAILED)

Comment by simo: Decryption can fail only if keys were replaced, int hat case you would have to purge also all contents of memcached as well as do something for all clients that have tickets for old keys.

Todo: check which branches are affected

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1265559

master:

  • 93d080d726359db16749104c8bc20d14a5455dc0 destroy httpd ccache after stopping the service

ipa-4-2:

  • 23f1d4ed605f9f4b22d6ad93c4110fff7358682c destroy httpd ccache after stopping the service

Metadata Update from @mbasti:
- Issue assigned to mbabinsk
- Issue set to the milestone: FreeIPA 4.2.2
Metadata
None
None
None
Normal
defect
Backup
0
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.