Bug 983153

Summary: Does not configure winbind for krb5 auth
Product: [Fedora] Fedora Reporter: David Woodhouse <dwmw2>
Component: realmdAssignee: Stef Walter <stefw>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: jhrozek, pkis, stefw, yelley
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: realmd-0.14.3-1.fc19 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 985819 (view as bug list) Environment:
Last Closed: 2013-08-02 03:46:25 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 985819    

Description David Woodhouse 2013-07-10 15:52:21 UTC
When I use realmd to join a domain with winbind, I would expect it to set the 'krb5_auth=yes' and 'krb5_ccache_file=FILE' options in pam_winbind.conf. And probably also 'cached_login=yes'.

It doesn't appear to do so.

Comment 1 Stef Walter 2013-07-11 17:30:28 UTC
(In reply to David Woodhouse from comment #0)
> When I use realmd to join a domain with winbind, I would expect it to set
> the 'krb5_auth=yes' and 'krb5_ccache_file=FILE' options in pam_winbind.conf.

You probably mean krb5_ccache_type=FILE right? But seems to make sense.

> And probably also 'cached_login=yes'.

Makes sense.

Comment 2 David Woodhouse 2013-07-11 20:01:27 UTC
Yes, I did mean that. Sorry. And it should be in the right place, not /tmp/krb5cc_%{uid}.

Comment 3 Stef Walter 2013-07-15 13:12:23 UTC
Patch upstream for realmd. Although think that /tmp/krb5cc_%U is hard coded into samba. :(

Comment 4 Fedora Update System 2013-07-22 16:34:59 UTC
realmd-0.14.3-1.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/realmd-0.14.3-1.fc19

Comment 5 Fedora Update System 2013-07-24 03:25:32 UTC
Package realmd-0.14.3-1.fc19:
* should fix your issue,
* was pushed to the Fedora 19 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing realmd-0.14.3-1.fc19'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-13467/realmd-0.14.3-1.fc19
then log in and leave karma (feedback).

Comment 6 Fedora Update System 2013-08-02 03:46:25 UTC
realmd-0.14.3-1.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.