[Freeipa-users] strange gss failures in RHEL 6.3

[Dale Macartney]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 28/06/12 06:52, Sumit Bose wrote:
> On Wed, Jun 27, 2012 at 10:35:00PM +0100, Dale Macartney wrote:
>>
> Evening all
>
> I have just updated my local RHEL 6 repositories from 6.2 to 6.3 and
> installed a new ipa server in a test network.
>
> I get the following errors now despite having a valid tgt. This worked
> perfectly a few hours ago (before I updated the repos)
>
> [root at ds01 ~]# date
> Wed Jun 27 22:31:01 BST 2012
> [root at ds01 ~]# kinit admin
> Password for admin at EXAMPLE.COM:
> [root at ds01 ~]# klist
> Ticket cache: FILE:/tmp/krb5cc_0
> Default principal: admin at EXAMPLE.COM
>
> Valid starting Expires Service principal
> 06/27/12 22:31:06 06/28/12 22:31:04 krbtgt/EXAMPLE.COM at EXAMPLE.COM
> [root at ds01 ~]# date
> Wed Jun 27 22:31:10 BST 2012
> [root at ds01 ~]#
> [root at ds01 ~]#
> [root at ds01 ~]# ipa user-find
> ipa: ERROR: Local error: SASL(-1): generic failure: GSSAPI Error:
> Unspecified GSS failure. Minor code may provide more information
> (Ticket not yet valid)
> [root at ds01 ~]#
>
> > Please check if there are some old tickets which might bestill used by
> > apache. Run
>
> > find /tmp/systemd-namespace-* -name krb5cc_48
>
> > (assuming your apache user has uid 48), delete the files listed here and
> > try ipa user-find again.
>
> > HTH
>
> > bye,
> > Sumit
>
>
Thanks Sumit,
Despite having this issue for a good while last night. I finished up for
the night and it is no longer present this morning. I'll give your
suggestion a try if the problem comes back.

Dale
>
> Has something changes from 6.2 to 6.3 that would cause this by any chance?
>
> thanks
>
> Dale
>
>
>>
>
>> pub 4096R/B5B41FAA 2010-11-27 Dale Macartney <dbmacartney at gmail.com>
>> uid Dale Macartney <dale.macartney at bskyb.com>
>> uid Dale Macartney <dale at themacartneyclan.com>
>> sub 4096R/CF50A682 2010-11-27 [verfällt: 2012-11-26]
>
>
>> _______________________________________________
>> Freeipa-users mailing list
>> Freeipa-users at redhat.com
>> https://www.redhat.com/mailman/listinfo/freeipa-users
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJP7BM4AAoJEAJsWS61tB+qWUUP/iQHr2cdgnYMbQOkwP5u4Ddy
CinIb8sWtKbBDdcNAULJqTfsD+juncGI+Hf/9Mig8hQ/OTsq6fjGBQN804TTQHPL
ALkoUoeX7KHKsU40D5H1OltELv/z5/8L9cd3RXHel+1n7TcSSpCDVgVmOVK/mgBh
Bxc5DkJ/FwEdkD9zzAZuhRmtCCcXluPtwtwegz8I31jxUN+BOH1c4OzYRnOhkPe8
O9onckphtJ0UsB29DYxuj0TNVfYOmw7xRIW+otUYmva7V5UZhRTjaBTt284Cnq2S
6ZV9fikOkzBEbD+CSHT7lzAsP68vgmoSJVLDD9CwTN4hgmCe8T5vbN+ZblfC5+08
rt/rkbLWBwcf/iptYAOkAW080/HnX0gA4SAfEIESw+bqIO36XyFmRSDucnUACX/R
wU2X3adYeUDBy4xSOU8Fls25X0JKbpCShS9nsYcjMtRjXB6AcRwWq2RtozEN0vnK
0Ba3BgFoMZfRVvTdMCXc/HdqnokjGav4igKOkMu6RMi5hBqPYkwr9So1yTTVObro
bwjDVwyYb0DgZm6UVnPq0/ih0T7PcXxEnlKnU58x2nJy9TMWGJocPbQSwbbhpmy5
4Gf7zB5MafzOF82xuVFYUOhN1jWIJ5uhDzO2UPAxcViCucnKwV++0zfskRWOEvzE
IJ5DTfLgE/gSf39DVRIx
=u4eN
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120628/81236c56/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0xB5B41FAA.asc
Type: application/pgp-keys
Size: 5790 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120628/81236c56/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0xB5B41FAA.asc.sig
Type: application/pgp-signature
Size: 543 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120628/81236c56/attachment.sig>