Bug 1265559

Summary: GSS failure after ipa-restore
Product: Red Hat Enterprise Linux 7 Reporter: Jan Cholasta <jcholast>
Component: ipaAssignee: IPA Maintainers <ipa-maint>
Status: CLOSED ERRATA QA Contact: Namita Soman <nsoman>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.2CC: drieden, ksiddiqu, mbasti, mkosek, rcritten
Target Milestone: rcKeywords: Regression
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-4.2.0-12.el7 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-11-19 12:07:32 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
console output with verification steps none

Description Jan Cholasta 2015-09-23 08:37:59 UTC 
This bug is created as a clone of upstream ticket:
https://fedorahosted.org/freeipa/ticket/5296

I'm getting following failure after  ipa-restore
{{{
ipa: ERROR: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Decrypt integrity check failed)
}}}

Steps to reproduce:
1. install IPA
1. backup
1. uninstall IPA
1. install IPA
1. restore
1. kinit admin
1. ipa user-find (FAILED)
Comment 2 Martin Bašti 2015-09-23 11:06:22 UTC 
Fixed upstream
master:
https://fedorahosted.org/freeipa/changeset/93d080d726359db16749104c8bc20d14a5455dc0
ipa-4-2:
https://fedorahosted.org/freeipa/changeset/23f1d4ed605f9f4b22d6ad93c4110fff7358682c
Comment 5 Kaleem 2015-09-30 06:13:39 UTC 
Created attachment 1078538 [details]
console output with verification steps

Verified.

Please find the attachment for verification logs.
Comment 6 errata-xmlrpc 2015-11-19 12:07:32 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-2362.html