On Thu, Sep 10, 2020 at 11:13:51AM +0200, Radoslaw Kujawa via FreeIPA-users wrote:
>Can you send the version of the krb5-libs package you are using on
>CentOS-8 and F32 as well?
F32: krb5-libs-1.18.2-20.fc32.x86_64
CentOS 8: krb5-libs-1.17-18.el8.x86_64
Btw. I have downgraded SSSD to 2.2.3 on F32, but the problem persist.
In my original email I have switched around SSSD versions used on
CentOS and Fedora. But now I have the same version on both, so I guess
my theory about it being a problem with SSSD could have been wrong:
Hi,
the issue is on the SSSD side. I assume the order the pre-authentication
methods are returned by libkrb5 has changed. So far SSSD implicitly
assume that PKINIT comes first and hence did not enforce the order. I
will add some code to make sure PKINIT is preferred over OTP and
password if a Smartcard is present.
bye,
Sumit
F32: sssd-2.2.3-13.fc32.x86_64
CentOS 8: sssd-2.2.3-20.el8.x86_64
Best regards,
Radoslaw
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...