I have exactly the same issue after the update.
Which logs do you need to check the issue? In kdc.conf there is no option set to ignore PAC.
I could fix the issue by running these commands and add the attribute „ipantsecurityidentifier“ to my users. Now it works.
https://access.redhat.com/documentation/de-de/red_hat_enterprise_linux/8/htm... Chapter 12. Strengthening Kerberos security with PAC information Red Hat Enterprise Linux 8 | Red Hat Customer Portal access.redhat.com
Am 22.01.2024 um 20:53 schrieb Sören Rothe srothe@gmx.net:
I have exactly the same issue after the update.
Which logs do you need to check the issue? In kdc.conf there is no option set to ignore PAC.
freeipa-users@lists.fedorahosted.org