Bug 2103125

Summary:	Please backport commits from Fedora krb5 package to RHEL for IdP work. Without them its failing. [rhel-8.7]
Product:	Red Hat Enterprise Linux 8	Reporter:	anuja <amore>
Component:	krb5	Assignee:	Julien Rische <jrische>
Status:	CLOSED ERRATA	QA Contact:	Filip Dvorak <fdvorak>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.7	CC:	fdvorak, sumenon
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	krb5-1.18.2-21.el8	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	2100351	Environment:
Last Closed:	2022-11-08 10:45:40 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2101770

Description anuja 2022-07-01 13:49:01 UTC

Description of problem:
Kinit is failing with Pre-authentication failure.

Steps to Reproduce:
1. Setup ipa-server and user configured with external IdP.
2. Kinit with fast : kinit -T /tmp/armor keycloakuser

Expected results:
kinit should be successful with valid ticket. 

Commits required to backport
- https://src.fedoraproject.org/rpms/krb5/c/0ceb166d962e91314715d1167af9584f90020504?branch=rawhide
- https://src.fedoraproject.org/rpms/krb5/c/fc958d47737fba99e4187562ac0ce2d445845798?branch=rawhide

Comment 19 errata-xmlrpc 2022-11-08 10:45:40 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (krb5 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:7696