<div dir="ltr">Sure, I have that envirnment variable defined.<div><br></div><div><div>[ola@galaxy ~]$ export | grep KRB5CCNAME</div><div>declare -x KRB5CCNAME=&quot;KEYRING:persistent:11103&quot;</div><div><br></div><div><br></div><div>[ola@galaxy ~]$ klist</div><div>klist: No credentials cache found while retrieving principal name</div><div><br></div><div>[ola@galaxy ~]$ kinit</div><div>Password for ola@ENSKEDE.LOCAL: </div><div><br></div><div>[ola@galaxy ~]$ klist</div><div>Ticket cache: KEYRING:persistent:11103</div><div>Default principal: ola@ENSKEDE.LOCAL</div><div><br></div><div>Valid starting     Expires            Service principal</div><div>04/14/15 23:08:55  04/15/15 09:08:58  krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL</div><div>        renew until 04/21/15 23:08:55</div><div><br></div><div>[ola@galaxy ~]$ grep ola /etc/passwd</div><div><br></div><div>[ola@galaxy ~]$ getent passwd ola</div><div>ola:*:11103:11116:Ola Nystrom:/home/ola:/bin/bash</div></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Apr 14, 2015 at 11:02 PM, Lukas Slebodnik <span dir="ltr">&lt;<a href="mailto:lslebodn@redhat.com" target="_blank">lslebodn@redhat.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On (14/04/15 22:27), Ola Nystrom wrote:<br>
&gt;I was a bit unsure of the KEYRING-support myself.<br>
&gt;But I have CentOS 6.6 and use KEYRING.<br>
&gt;<br>
&gt;[ola@galaxy ~]$ kinit<br>
&gt;Password for ola@ENSKEDE.LOCAL:<br>
&gt;[ola@galaxy ~]$ klist<br>
</span>&gt;*Ticket cache: KEYRING:persistent:11103*<br>
<span class="">&gt;Default principal: ola@ENSKEDE.LOCAL<br>
&gt;<br>
&gt;Valid starting     Expires            Service principal<br>
&gt;04/14/15 22:27:09  04/15/15 08:27:13  krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL<br>
&gt;        renew until 04/21/15 22:27:09<br>
&gt;[ola@galaxy ~]$ cat /etc/redhat-release<br>
&gt;CentOS release 6.6 (Final)<br>
&gt;<br>
</span>Intresting :-)<br>
<br>
I though problem is with keyring ccache due to following lines in log.<br>
[sss_get_ccache_name_for_principal] (0x4000): Location: [KEYRING:persistent:11103]<br>
[sss_get_ccache_name_for_principal] (0x2000): krb5_cc_cache_match failed: [-1765328243][Can&#39;t find client principal ola@ENSKEDE.LOCAL in cache collection]<br>
<br>
bu there is also line:<br>
<span class="">[krb5_mod_ccname] (0x4000): Save ccname [KEYRING:persistent:11103] for user [ola]<br>
<br>
</span>Do you have set enviroment variable KRB5CCNAME?<br>
<br>
Could you try to export KRB5CCNAME=KEYRING:persistent:11103 after login?<br>
It would help us to find whether ticket was created.<br>
Please check time of creation.<br>
<div class="HOEnZb"><div class="h5"><br>
LS<br>
_______________________________________________<br>
sssd-users mailing list<br>
<a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature">Ola Nyström<br><br>“OSI model jokes work on so many levels”<br>— jorge_rbs</div>
</div>