[SSSD-users] Not getting any ticket in ccache in CentOS 6.6

Jakub Hrozek jhrozek at redhat.com
Wed Apr 15 05:53:17 UTC 2015


On Tue, Apr 14, 2015 at 11:36:46PM +0200, Ola Nystrom wrote:
> Removed the line from krb5.conf
> restarted sssd
> 
> Still same issue
> 
> [ola at galaxy ~]$ klist
> klist: No credentials cache found while retrieving principal name
> [ola at galaxy ~]$ kinit
> Password for ola at ENSKEDE.LOCAL:
> [ola at galaxy ~]$ klist
> Ticket cache: KEYRING:persistent:11103
> Default principal: ola at ENSKEDE.LOCAL
> 
> Valid starting     Expires            Service principal
> 04/14/15 23:36:33  04/15/15 09:36:36  krbtgt/ENSKEDE.LOCAL at ENSKEDE.LOCAL
>         renew until 04/21/15 23:36:33
> [ola at galaxy ~]$ cat /etc/krb5.conf
> [logging]
>  default = FILE:/var/log/krb5libs.log
>  kdc = FILE:/var/log/krb5kdc.log
>  admin_server = FILE:/var/log/kadmind.log
> 
> [libdefaults]
>  default_realm = ENSKEDE.LOCAL
>  dns_lookup_realm = true
>  dns_lookup_kdc = true
>  ticket_lifetime = 24h
>  renew_lifetime = 7d
>  forwardable = true
>  rdns = false
> [ola at galaxy ~]$

This is really strange. What I think Lukas was getting at was "try FILE"
ccache.

Can you also remove the SSSD cache to start clean, I wonder if SSSD is
trying to reuse the old ccache (yes, we should revive Simo's patches to
stop saving ccache to sysdb unless really needed).


More information about the sssd-users mailing list