https://bugzilla.redhat.com/show_bug.cgi?id=2016992
--- Comment #13 from Ankur Sinha (FranciscoD) <sanjay.ankur(a)gmail.com> ---
Created attachment 1836909
-->
https://bugzilla.redhat.com/attachment.cgi?id=1836909&action=edit
new sssd_kcm.log file
(In reply to Pavel Březina from comment #11)
I've tested upgrade path too, quite extensively so I'm
curious how we missed
this. Anyway it looks like ccdb_secdb_get_default_send() does not validate
the iobuffer through sec_kv_to_ccache_binary() so it does not purge the
cache.
It should be enough to delete /var/lib/sss/secrets/secrets.ldb and run kinit
but if you don't mind, please create a copy of it and keep it for testing
fix for this bug.
Sure. I've made a copy of this already and will keep it safe.
(In reply to Alexey Tikhonov from comment #12)
(In reply to Ankur Sinha (FranciscoD) from comment #10)
> Ah, sorry about that. I'm happy to nuke the old ticket and create a new one
> if there's a way to do that. Maybe I can downgrade, `kdestroy`, then upgrade
> and then `kinit`? Would that workaround the "credentials cache.." issue?
I think it should, but I'd like to ask you to keep you ccache intact until I
was able to reproduce this locally.
But in your original email you wrote "just updated two F35 systems", so
perhaps you could try this (kdestroy(a)2.5 and kinit(a)2.6) on one of systems?
Sure. I downgraded the other system to be able to build packages etc., I can
kdestroy there, upgrade to 2.6.0 and try kinit to see what happens and report
back.
Moreover, I didn't actually see any failed attempt to `kinit` in
sssd_kcm.log. What is the output of kinit(a)2.6?
I get the same thing with all kdestroy/klist/kinit:
(ins)[asinha@ankur ~]$ date
Mon 25 Oct 16:20:31 BST 2021
(ins)[asinha@ankur ~]$ klist
klist: Credentials cache I/O operation failed while resolving ccache
(ins)[asinha@ankur ~]$ kinit
kinit: Credentials cache I/O operation failed while getting default ccache
(ins)[asinha@ankur ~]$ kdestroy
kdestroy: Credentials cache I/O operation failed while resolving ccache]
sssd_kcm.log attached again.
--
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2016992