Bug 53673

Summary:	/etc/krb5.conf no longer honoring multiple afs_cells
Product:	[Retired] Red Hat Linux	Reporter:	Mike Sklar <sklarm>
Component:	krb5	Assignee:	Nalin Dahyabhai <nalin>
Status:	CLOSED CANTFIX	QA Contact:	Brian Brock <bbrock>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	9	CC:	mattdm
Target Milestone:	---
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-01-02 18:55:12 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Mike Sklar 2001-09-14 16:44:18 UTC

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.2) Gecko/20010809

Description of problem:
/etc/krb5.conf on releases previous the roswell beta2 would allow a user to
get tokens for all afs cells specificied in the afs_cells field. Now I am
only able to obtain a single afs token for the first cell entry.

asdfjkl$ telnet leftover3
Trying 144.14.217.216...
Connected to leftover3.ms.com.
Escape character is '^]'.
Red Hat Linux release 7.1.94 (Roswell)
Kernel 2.4.7-2 on an i686
login: sklarm
Password: 
leftover3$ tokens

Tokens held by the Cache Manager:

Tokens for afs.ms.com [Expires Oct 14 12:51]
   --End of list--


Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1.Put multiple afs_cells in your /etc/krb5.conf and only the first will
authenticate with roswell beta2 8/19/01
2.
3.
	

Actual Results:  one token is obtained for the first listed cell, but not all.

Expected Results:  tokens should be obtained for all cells

Additional info:

Comment 1 Mike Sklar 2001-10-24 19:28:23 UTC

I noticed that the pam_krb5 is still giving me problems with redhat 7.2.
Possibly from my usage of older style /etc/pam.d/* configuration files. I ended
up copying over a /lib/security/pam_krb5afs.so from a seawolf machine and all is
well.

I will have to look into updating my own pam configuration files.

Comment 2 Bill Nottingham 2006-08-05 04:20:45 UTC

Red Hat apologizes that these issues have not been resolved yet. We do want to
make sure that no important bugs slip through the cracks.

Red Hat Linux 7.3 and Red Hat Linux 9 are no longer supported by Red Hat, Inc.
They are maintained by the Fedora Legacy project (http://www.fedoralegacy.org/)
for security updates only. If this is a security issue, please reassign to the
'Fedora Legacy' product in bugzilla. Please note that Legacy security update
support for these products will stop on December 31st, 2006.

If this is not a security issue, please check if this issue is still present
in a current Fedora Core release. If so, please change the product and version
to match, and check the box indicating that the requested information has been
provided.

If you are currently still running Red Hat Linux 7.3 or 9, please note that
Fedora Legacy security update support for these products will stop on December
31st, 2006. You are strongly advised to upgrade to a current Fedora Core release
or Red Hat Enterprise Linux or comparable. Some information on which option may
be right for you is available at http://www.redhat.com/rhel/migrate/redhatlinux/.

Any bug still open against Red Hat Linux 7.3 or 9 at the end of 2006 will be
closed 'CANTFIX'. Again, if this bug still exists in a current release, or is a
security issue, please change the product as necessary. We thank you for your
help, and apologize again that we haven't handled these issues to this point.

Comment 4 Bill Nottingham 2007-01-02 18:55:12 UTC

Red Hat Linux 7.3 and Red Hat Linux 9 are no longer supported by Red Hat, Inc.
f you are currently still running Red Hat Linux 7.3 or 9, you are strongly
advised to upgrade to a current Fedora Core release or Red Hat Enterprise Linux
or comparable. Some information on which option may be right for you is
available at http://www.redhat.com/rhel/migrate/redhatlinux/.

Closing as CANTFIX.