Bug 953445

Summary:	Typing wrong password into Enterprise Logins says "Decrypt Integrity Check Failed"
Product:	[Fedora] Fedora	Reporter:	Stef Walter <stefw>
Component:	control-center	Assignee:	Control Center Maintainer <control-center-maint>
Status:	CLOSED NEXTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	19	CC:	control-center-maint, dpal, mkasik, mkosek, ofourdan, pkis, rstrode, yelley
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-05-13 15:19:24 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	917663, 918092

Description Stef Walter 2013-04-18 08:42:40 UTC

When setting up an Enterprise Login for a FreeIPA domain, type wrong password, and you often get a "Decrypt integrity check failed" message.

This is the code that FreeIPA (and other non-AD KDCs) return for bad password.

Upstream bug: https://bugzilla.gnome.org/show_bug.cgi?id=698266

From the test day: https://fedoraproject.org/wiki/Test_Day:2013-04-18_FreeIPA

Comment 1 Patrik Kis 2013-04-19 08:46:39 UTC

Apart of this the control-center could give a hint what was wrong when the user add failed. E.g. if the given domain cannot be discovered, or the user credentials were wrong.
I'm not sure if it it possible distinguish between wrong user name or wrong password, but the the incorrect domain.name can be seen in logs definitely.

Comment 2 Stef Walter 2013-04-19 12:36:38 UTC

Yes, that's the whole point of this bug. It works as expected against AD, but not against FreeIPA.

Comment 3 Dmitri Pal 2013-04-19 19:32:01 UTC

AD has richer error codes. IPA KDC does not add any usability on top of what vanilla MIT KDC returns in this case.

Comment 4 Stef Walter 2013-04-19 19:32:50 UTC

Patched upstream in both realmd and gnome-control-center.

Comment 5 Fedora Update System 2013-05-06 21:35:33 UTC

control-center-3.8.1.5-1.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/control-center-3.8.1.5-1.fc19

Comment 6 Fedora Update System 2013-05-06 21:40:55 UTC

control-center-3.8.1.5-1.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/control-center-3.8.1.5-1.fc19

Comment 7 Stef Walter 2013-05-13 15:19:24 UTC

control-center 3.8.1.5 has been pushed to stable Fedora 19:

https://admin.fedoraproject.org/updates/FEDORA-2013-7788/control-center-3.8.1.5-1.fc19