On Tue, Apr 14, 2015 at 11:36:46PM +0200, Ola Nystrom wrote:
Removed the line from krb5.conf
restarted sssd
Still same issue
[ola@galaxy ~]$ klist
klist: No credentials cache found while retrieving principal name
[ola@galaxy ~]$ kinit
Password for ola(a)ENSKEDE.LOCAL:
[ola@galaxy ~]$ klist
Ticket cache: KEYRING:persistent:11103
Default principal: ola(a)ENSKEDE.LOCAL
Valid starting Expires Service principal
04/14/15 23:36:33 04/15/15 09:36:36 krbtgt/ENSKEDE.LOCAL(a)ENSKEDE.LOCAL
renew until 04/21/15 23:36:33
[ola@galaxy ~]$ cat /etc/krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = ENSKEDE.LOCAL
dns_lookup_realm = true
dns_lookup_kdc = true
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
rdns = false
[ola@galaxy ~]$
This is really strange. What I think Lukas was getting at was "try FILE"
ccache.
Can you also remove the SSSD cache to start clean, I wonder if SSSD is
trying to reuse the old ccache (yes, we should revive Simo's patches to
stop saving ccache to sysdb unless really needed).