[SSSD-users] Not getting any ticket in ccache in CentOS 6.6
Ola Nystrom
olanys at gmail.com
Tue Apr 14 21:09:35 UTC 2015
Sure, I have that envirnment variable defined.
[ola at galaxy ~]$ export | grep KRB5CCNAME
declare -x KRB5CCNAME="KEYRING:persistent:11103"
[ola at galaxy ~]$ klist
klist: No credentials cache found while retrieving principal name
[ola at galaxy ~]$ kinit
Password for ola at ENSKEDE.LOCAL:
[ola at galaxy ~]$ klist
Ticket cache: KEYRING:persistent:11103
Default principal: ola at ENSKEDE.LOCAL
Valid starting Expires Service principal
04/14/15 23:08:55 04/15/15 09:08:58 krbtgt/ENSKEDE.LOCAL at ENSKEDE.LOCAL
renew until 04/21/15 23:08:55
[ola at galaxy ~]$ grep ola /etc/passwd
[ola at galaxy ~]$ getent passwd ola
ola:*:11103:11116:Ola Nystrom:/home/ola:/bin/bash
On Tue, Apr 14, 2015 at 11:02 PM, Lukas Slebodnik <lslebodn at redhat.com>
wrote:
> On (14/04/15 22:27), Ola Nystrom wrote:
> >I was a bit unsure of the KEYRING-support myself.
> >But I have CentOS 6.6 and use KEYRING.
> >
> >[ola at galaxy ~]$ kinit
> >Password for ola at ENSKEDE.LOCAL:
> >[ola at galaxy ~]$ klist
> >*Ticket cache: KEYRING:persistent:11103*
> >Default principal: ola at ENSKEDE.LOCAL
> >
> >Valid starting Expires Service principal
> >04/14/15 22:27:09 04/15/15 08:27:13 krbtgt/ENSKEDE.LOCAL at ENSKEDE.LOCAL
> > renew until 04/21/15 22:27:09
> >[ola at galaxy ~]$ cat /etc/redhat-release
> >CentOS release 6.6 (Final)
> >
> Intresting :-)
>
> I though problem is with keyring ccache due to following lines in log.
> [sss_get_ccache_name_for_principal] (0x4000): Location:
> [KEYRING:persistent:11103]
> [sss_get_ccache_name_for_principal] (0x2000): krb5_cc_cache_match failed:
> [-1765328243][Can't find client principal ola at ENSKEDE.LOCAL in cache
> collection]
>
> bu there is also line:
> [krb5_mod_ccname] (0x4000): Save ccname [KEYRING:persistent:11103] for
> user [ola]
>
> Do you have set enviroment variable KRB5CCNAME?
>
> Could you try to export KRB5CCNAME=KEYRING:persistent:11103 after login?
> It would help us to find whether ticket was created.
> Please check time of creation.
>
> LS
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>
--
Ola Nyström
“OSI model jokes work on so many levels”
— jorge_rbs
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20150414/bc37f6db/attachment-0001.html>
More information about the sssd-users
mailing list