I will provide more logs shortly. Just one quick question:
I updates to Ubuntu 15.10 (latest) and all problems persist if I dont
use FILE based caches.
I then checked the installed packages in Ubuntu and to my surpise, I
found a mixed setup with MIT kerberos and Heimdal Kerberos libraries.
E.g. the openLDAP service and all Samba tools use heimdal, whereas the
rest of the system uses MIT kerberos libs.
So, I am starting to believe that the problems I see are coming from
this mixture of kerberos libs.
E.g., when I use DIR ccaches as default in /etc/krb5.conf and then
remove the KRB5CCNAME variable in my session, all MIT-based kerberos
tools still work (because they read the setup correctly from
/etc/krb5.conf) while all Samba tools fail and use /tmp/ to check for
Is there anything known about Ubuntu and anything else then FILE based
ccaches? E.g. I found:
On 11/10/2015 11:40 AM, Lukas Slebodnik wrote:
On (10/11/15 11:10), Joschi Brauchle wrote:
> On 11/10/2015 10:54 AM, Lukas Slebodnik wrote:
>> On (09/11/15 17:54), Joschi Brauchle wrote:
>>> Please find the logs of the domain section here:
>> The user ne96soh was successfully authenticated.
>> Did you attach log fiels with kernel keyring ccache?
> Yes, the user is authenticated successfully!
> The problem is, that there exists no CCACHE after login, i.e., I get:
> $ klist
> klist: No credentials cache found while retrieving principal name
Could you tell us what is a value of env variable KRB5CCNAME
Do you test with ssh or su or "su -"
Please also provide dump of sssd cache after authentication.
There should be somethig about ccache as well.
ldbsearch -H /var/lib/sss/db/cache_*.com.ldb
sssd-users mailing list
Dipl.-Ing. Joschi Brauchle, M.S.
Institute for Communications Engineering (LNT)
Technische Universitaet Muenchen (TUM)
80290 Munich, Germany
Tel: +49 89 289-23474
Fax: +49 89 289-23490