On 11/10/2015 10:54 AM, Lukas Slebodnik wrote:
On (09/11/15 17:54), Joschi Brauchle wrote:
> Please find the logs of the domain section here:
>
http://pastebin.com/raw.php?i=WjU2TFNT
>
...
The user ne96soh was successfully authenticated.
Did you attach log fiels with kernel keyring ccache?
LS
Yes, the user is authenticated successfully!
The problem is, that there exists no CCACHE after login, i.e., I get:
----------
$ klist
klist: No credentials cache found while retrieving principal name
----------
I just changed the setup from KEYRING to DIR based cache collections and
get a similar error:
---------- /etc/krb5.conf
[libdefaults]
...
default_ccache_name = DIR:/run/user/%{uid}/krb5cc
----------
Now after login I get
----------
$ klist
klist: Credentials cache file '/run/user/3036404/krb5cc/tkt' not found
$ ls -al /run/user/3036404/krb5cc
-rw------- 1 myuser mygroup 4 Nov 10 11:06 /run/user/3036404/krb5cc/primary
$ cat /run/user/3036404/krb5cc/primary
tkt
----------
But again, a manual kinit is successful:
----------
$ kinit
Password for myuser@MYREALM:
$ klist
Ticket cache: DIR::/run/user/3036404/krb5cc/tkt
Default principal: myuser@MYREALM
Valid starting Expires Service principal
11/10/2015 11:08:40 11/10/2015 21:08:40 krbtgt/MYREALM@MYREALM
renew until 11/17/2015 11:08:40
----------
To me this somehow looks like something else (like SElinux oder
AppArmor) getting in the way of any other ccache setup than FILE. Only
that I uninstalled and disabled apparmor completely...
What else can this be?!?