Please find the logs of the domain section here:
http://pastebin.com/raw.php?i=WjU2TFNT
As mentioned, I can log in just fine when using FILE based caches.
Here is a tail of a DIFF of the krb5_child.log between a FILE and
KEYRING login:
--- sssd.file/krb5_child.log 2015-11-09 17:38:50.499412249 +0100
+++ sssd.keyring/krb5_child.log 2015-11-09 17:38:36.827472075 +0100
@@ -2 +2 @@
-[[sssd[krb5_child]]] [unpack_buffer] (0x1000): total buffer size: [152]
+[[sssd[krb5_child]]] [unpack_buffer] (0x1000): total buffer size: [147]
@@ -4 +4 @@
-[[sssd[krb5_child]]] [unpack_buffer] (0x0100): ccname:
[FILE:/tmp/krb5cc_3036404_XXXXXX] old_ccname:
[KEYRING:persistent:3036404] keytab: [/etc/krb5.keytab]
+[[sssd[krb5_child]]] [unpack_buffer] (0x0100): ccname:
[KEYRING:persistent:3036404] old_ccname: [KEYRING:persistent:3036404]
keytab: [/etc/krb5.keytab]
@@ -41 +41 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Encrypted
timestamp (for 1447086864.253259): plain
301AA011180F32303135313130393136333432345AA105020303DD4B, encrypted
524172B321C1B579A7F4B653AD67E00D97616A3AECAB1BA35B89481ED0AF6ADECD9F16068FA9A32490FD8CFDE0EDFA82CFDC7B2CE3493C43
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Encrypted
timestamp (for 1447086718.404997): plain
301AA011180F32303135313130393136333135385AA1050203062E05, encrypted
A2D47A87494D3A06AFD635A758AE6AF519538AD992A71489B7EE71A40DAB8711C796DB654C3B62E0EBAA6F6DF4EC13F587F2AD34DB41F423
@@ -81 +81 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Decrypted AS
reply; session key is: aes256-cts/FADF
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Decrypted AS
reply; session key is: aes256-cts/0C47
@@ -85 +85 @@
-[[sssd[krb5_child]]] [sss_krb5_expire_callback_func] (0x2000):
exp_time: [689422421]
+[[sssd[krb5_child]]] [sss_krb5_expire_callback_func] (0x2000):
exp_time: [689422567]
@@ -91 +91 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Initializing
MEMORY:Pabonj3 with default princ myusername@MYREALM
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Initializing
MEMORY:WWLjrPf with default princ myusername@MYREALM
@@ -93 +93 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Removing
myusername@MYREALM -> krbtgt/MYREALM@MYREALM from MEMORY:Pabonj3
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Removing
myusername@MYREALM -> krbtgt/MYREALM@MYREALM from MEMORY:WWLjrPf
@@ -95 +95 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Storing
myusername@MYREALM -> krbtgt/MYREALM@MYREALM in MEMORY:Pabonj3
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Storing
myusername@MYREALM -> krbtgt/MYREALM@MYREALM in MEMORY:WWLjrPf
@@ -97 +97 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Getting
credentials myusername@MYREALM -> myhostname$@MYREALM using ccache
MEMORY:Pabonj3
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Getting
credentials myusername@MYREALM -> myhostname$@MYREALM using ccache
MEMORY:WWLjrPf
@@ -99 +99 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Retrieving
myusername@MYREALM -> myhostname$@MYREALM from MEMORY:Pabonj3 with
result: -1765328243/Matching credential not found
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Retrieving
myusername@MYREALM -> myhostname$@MYREALM from MEMORY:WWLjrPf with
result: -1765328243/Matching credential not found
@@ -101 +101 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Retrieving
myusername@MYREALM -> krbtgt/MYREALM@MYREALM from MEMORY:Pabonj3 with
result: 0/Success
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Retrieving
myusername@MYREALM -> krbtgt/MYREALM@MYREALM from MEMORY:WWLjrPf with
result: 0/Success
@@ -107 +107 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Generated
subkey for TGS request: aes256-cts/9793
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Generated
subkey for TGS request: aes256-cts/6A8B
@@ -137 +137 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): FAST reply
key: aes256-cts/445A
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): FAST reply
key: aes256-cts/FC6B
@@ -139 +139 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): TGS reply is
for myusername@MYREALM -> myhostname$@MYREALM with session key
aes256-cts/4945
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): TGS reply is
for myusername@MYREALM -> myhostname$@MYREALM with session key
aes256-cts/4221
@@ -145 +145 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Removing
myusername@MYREALM -> myhostname$@MYREALM from MEMORY:Pabonj3
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Removing
myusername@MYREALM -> myhostname$@MYREALM from MEMORY:WWLjrPf
@@ -147 +147 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Storing
myusername@MYREALM -> myhostname$@MYREALM in MEMORY:Pabonj3
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Storing
myusername@MYREALM -> myhostname$@MYREALM in MEMORY:WWLjrPf
@@ -149 +149 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Creating
authenticator for myusername@MYREALM -> myhostname$@MYREALM, seqnum 0,
subkey (null), session key aes256-cts/4945
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Creating
authenticator for myusername@MYREALM -> myhostname$@MYREALM, seqnum 0,
subkey (null), session key aes256-cts/4221
@@ -155 +155 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): AP-REQ ticket:
myusername@MYREALM -> myhostname$@MYREALM, session key aes256-cts/4945
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): AP-REQ ticket:
myusername@MYREALM -> myhostname$@MYREALM, session key aes256-cts/4221
@@ -165 +165 @@
-[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Destroying
ccache MEMORY:Pabonj3
+[[sssd[krb5_child]]] [sss_child_krb5_trace_cb] (0x4000): Destroying
ccache MEMORY:WWLjrPf
@@ -176 +176 @@
-[[sssd[krb5_child]]] [sss_get_ccache_name_for_principal] (0x4000):
Location: [FILE:/tmp/krb5cc_3036404_XXXXXX]
+[[sssd[krb5_child]]] [sss_get_ccache_name_for_principal] (0x4000):
Location: [KEYRING:persistent:3036404]
@@ -178,3 +178,2 @@
-[[sssd[krb5_child]]] [create_ccache] (0x4000): Initializing ccache of
type [FILE]
-[[sssd[krb5_child]]] [switch_creds] (0x0200): Switch user to
[3036404][3000000].
-[[sssd[krb5_child]]] [switch_creds] (0x0200): Already user [3036404].
+[[sssd[krb5_child]]] [create_ccache] (0x4000): Initializing ccache of
type [KEYRING]
+[[sssd[krb5_child]]] [safe_remove_old_ccache_file] (0x0400): New and
old ccache file are the same, none will be deleted.
@@ -182 +181 @@
-[[sssd[krb5_child]]] [pack_response_packet] (0x2000): response packet
size: [138]
+[[sssd[krb5_child]]] [pack_response_packet] (0x2000): response packet
size: [133]
To me, this looks all completely okay. Still, I do not get a ccache in
the KEYRING configuration.