Hi, this might end up being not a bug report, there's just been something broken with krb5 on my machine and I'm not able to debug what and how to fix it. Version-Release number of selected component (if applicable): krb5-workstation-1.17-14.fc30.x86_64 Steps to Reproduce: kinit or klist or kdestroy Actual results: Connection refused while resolving ccache I already tried: - restart - selinux (relabel everything and setenforce 0) - reinstall krb5 rpms - locate the cache, but I don't see any /tmp/krb5* # grep default_ccache_name /etc/krb5.conf default_ccache_name = KEYRING:persistent:%{uid} KRB5CCNAME is not set Thank you for your suggestions.
Can you please show all the krb5-related commands you're trying to run, with output, and KRB5_TRACE=/dev/stderr set in the environment?
Sounds like you may have installed the sssd-kcm but ended up masking or somehow disabling it while the default ccache variable still points to it ?
And now, after another restart, it works like a charm :-) Closing, will reopen with more info if it ever happens again. Thanks.
Hi, I have the same error. I have tried to restart but I have still the error: ~ » KRB5_TRACE=/dev/stderr ~ » klist klist: Connection refused while resolving ccache ~ » kinit kinit: Connection refused while getting default ccache ~ » kdestroy kdestroy: Connection refused while resolving ccache If anyone have an idea please, I really don't know what can I do.
(In reply to mbollo from comment #4) > Hi, > > I have the same error. I have tried to restart but I have still the error: > > ~ » KRB5_TRACE=/dev/stderr > ~ » klist > klist: Connection refused while resolving ccache > ~ » kinit > kinit: Connection refused while getting default ccache > ~ » kdestroy > kdestroy: Connection refused while resolving ccache > > If anyone have an idea please, I really don't know what can I do. Hi, can you try to run KRB5_TRACE=/dev/stderr strace -f klist and send the output together with the messages from the journal from about the same time? bye, Sumit
This message is a reminder that Fedora 30 is nearing its end of life. Fedora will stop maintaining and issuing updates for Fedora 30 on 2020-05-26. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as EOL if it remains open with a Fedora 'version' of '30'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Fedora version. Thank you for reporting this issue and we are sorry that we were not able to fix it before Fedora 30 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora, you are encouraged change the 'version' to a later Fedora version prior this bug is closed as described in the policy above. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Fedora release includes newer upstream software that fixes bugs or makes them obsolete.
Sorry the result with strace: execve("/usr/bin/klist", ["klist"], 0x7ffea5f815a8 /* 83 vars */) = 0 brk(NULL) = 0x555cfdfdc000 arch_prctl(0x3001 /* ARCH_??? */, 0x7ffd4f391790) = -1 EINVAL (Invalid argument) access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=128356, ...}) = 0 mmap(NULL, 128356, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcfae8000 close(5) = 0 openat(AT_FDCWD, "/lib64/libkrb5.so.3", O_RDONLY|O_CLOEXEC) = 5 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\200\2\0\0\0\0\0"..., 832) = 832 fstat(5, {st_mode=S_IFREG|0755, st_size=967152, ...}) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2bcfae6000 mmap(NULL, 955616, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f2bcf9fc000 mmap(0x7f2bcfa1f000, 446464, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x23000) = 0x7f2bcfa1f000 mmap(0x7f2bcfa8c000, 299008, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x90000) = 0x7f2bcfa8c000 mmap(0x7f2bcfad5000, 69632, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xd8000) = 0x7f2bcfad5000 close(5) = 0 openat(AT_FDCWD, "/lib64/libk5crypto.so.3", O_RDONLY|O_CLOEXEC) = 5 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p^\0\0\0\0\0\0"..., 832) = 832 fstat(5, {st_mode=S_IFREG|0755, st_size=100664, ...}) = 0 mmap(NULL, 98552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f2bcf9e3000 mmap(0x7f2bcf9e8000, 53248, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x5000) = 0x7f2bcf9e8000 mmap(0x7f2bcf9f5000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x12000) = 0x7f2bcf9f5000 mmap(0x7f2bcf9f9000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x15000) = 0x7f2bcf9f9000 close(5) = 0 openat(AT_FDCWD, "/lib64/libcom_err.so.2", O_RDONLY|O_CLOEXEC) = 5 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P%\0\0\0\0\0\0"..., 832) = 832 fstat(5, {st_mode=S_IFREG|0755, st_size=25480, ...}) = 0 mmap(NULL, 24744, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f2bcf9dc000 mmap(0x7f2bcf9de000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2000) = 0x7f2bcf9de000 mmap(0x7f2bcf9e0000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x4000) = 0x7f2bcf9e0000 mmap(0x7f2bcf9e1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x4000) = 0x7f2bcf9e1000 close(5) = 0 openat(AT_FDCWD, "/lib64/libkrb5support.so.0", O_RDONLY|O_CLOEXEC) = 5 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260O\0\0\0\0\0\0"..., 832) = 832 fstat(5, {st_mode=S_IFREG|0755, st_size=71568, ...}) = 0 mmap(NULL, 70344, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f2bcf9ca000 mmap(0x7f2bcf9ce000, 36864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x4000) = 0x7f2bcf9ce000 mmap(0x7f2bcf9d7000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xd000) = 0x7f2bcf9d7000 mmap(0x7f2bcf9da000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xf000) = 0x7f2bcf9da000 close(5) = 0 openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 5 read(5, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200q\2\0\0\0\0\0"..., 832) = 832 pread64(5, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 pread64(5, "\4\0\0\0\20\0\0\0\5\0\0\0GNU\0\2\0\0\300\4\0\0\0\3\0\0\0\0\0\0\0", 32, 848) = 32 pread64(5, "\4\0\0\0\24\0\0\0\3\0\0\0GNU\0|\242MM\303\336\235b\331\255k\262^[p\243"..., 68, 880) = 68 fstat(5, {st_mode=S_IFREG|0755, st_size=3185792, ...}) = 0 pread64(5, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 pread64(5, "\4\0\0\0\20\0\0\0\5\0\0\0GNU\0\2\0\0\300\4\0\0\0\3\0\0\0\0\0\0\0", 32, 848) = 32 pread64(5, "\4\0\0\0\24\0\0\0\3\0\0\0GNU\0|\242MM\303\336\235b\331\255k\262^[p\243"..., 68, 880) = 68 mmap(NULL, 1872744, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f2bcf800000 mmap(0x7f2bcf825000, 1376256, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x25000) = 0x7f2bcf825000 mmap(0x7f2bcf975000, 307200, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x175000) = 0x7f2bcf975000 mmap(0x7f2bcf9c0000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x1bf000) = 0x7f2bcf9c0000 mmap(0x7f2bcf9c6000, 13160, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2bcf9c6000 close(5) = 0 openat(AT_FDCWD, "/lib64/libkeyutils.so.1", O_RDONLY|O_CLOEXEC) = 5 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360#\0\0\0\0\0\0"..., 832) = 832 fstat(5, {st_mode=S_IFREG|0755, st_size=24320, ...}) = 0 mmap(NULL, 24584, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f2bcf7f9000 mmap(0x7f2bcf7fb000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2000) = 0x7f2bcf7fb000 mmap(0x7f2bcf7fd000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x4000) = 0x7f2bcf7fd000 mmap(0x7f2bcf7fe000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x4000) = 0x7f2bcf7fe000 mmap(0x7f2bcf7ff000, 8, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2bcf7ff000 close(5) = 0 openat(AT_FDCWD, "/lib64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = 5 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\300\7\0\0\0\0\0"..., 832) = 832 fstat(5, {st_mode=S_IFREG|0755, st_size=3094744, ...}) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2bcf7f7000 mmap(NULL, 3067760, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f2bcf50a000 mprotect(0x7f2bcf584000, 2359296, PROT_NONE) = 0 mmap(0x7f2bcf584000, 1757184, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x7a000) = 0x7f2bcf584000 mmap(0x7f2bcf731000, 598016, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x227000) = 0x7f2bcf731000 mmap(0x7f2bcf7c4000, 192512, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2b9000) = 0x7f2bcf7c4000 mmap(0x7f2bcf7f3000, 16240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2bcf7f3000 close(5) = 0 openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 5 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000G\0\0\0\0\0\0"..., 832) = 832 fstat(5, {st_mode=S_IFREG|0755, st_size=129784, ...}) = 0 mmap(NULL, 104608, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f2bcf4f0000 mprotect(0x7f2bcf4f4000, 73728, PROT_NONE) = 0 mmap(0x7f2bcf4f4000, 57344, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x4000) = 0x7f2bcf4f4000 mmap(0x7f2bcf502000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x12000) = 0x7f2bcf502000 mmap(0x7f2bcf506000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x15000) = 0x7f2bcf506000 mmap(0x7f2bcf508000, 6304, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2bcf508000 close(5) = 0 openat(AT_FDCWD, "/lib64/libpthread.so.0", O_RDONLY|O_CLOEXEC) = 5 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\201\0\0\0\0\0\0"..., 832) = 832 pread64(5, "\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\327RS\31\36}a\366\224\\\202hu\232\262\257"..., 68, 824) = 68 fstat(5, {st_mode=S_IFREG|0755, st_size=317984, ...}) = 0 pread64(5, "\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\327RS\31\36}a\366\224\\\202hu\232\262\257"..., 68, 824) = 68 mmap(NULL, 135600, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f2bcf4ce000 mmap(0x7f2bcf4d5000, 65536, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x7000) = 0x7f2bcf4d5000 mmap(0x7f2bcf4e5000, 20480, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x17000) = 0x7f2bcf4e5000 mmap(0x7f2bcf4ea000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x1b000) = 0x7f2bcf4ea000 mmap(0x7f2bcf4ec000, 12720, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2bcf4ec000 close(5) = 0 openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 5 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\210\0\0\0\0\0\0"..., 832) = 832 fstat(5, {st_mode=S_IFREG|0755, st_size=176672, ...}) = 0 mmap(NULL, 181736, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f2bcf4a1000 mmap(0x7f2bcf4a8000, 106496, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x7000) = 0x7f2bcf4a8000 mmap(0x7f2bcf4c2000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x21000) = 0x7f2bcf4c2000 mmap(0x7f2bcf4ca000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x28000) = 0x7f2bcf4ca000 mmap(0x7f2bcf4cc000, 5608, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2bcf4cc000 close(5) = 0 openat(AT_FDCWD, "/lib64/libdl.so.2", O_RDONLY|O_CLOEXEC) = 5 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\"\0\0\0\0\0\0"..., 832) = 832 fstat(5, {st_mode=S_IFREG|0755, st_size=36800, ...}) = 0 mmap(NULL, 24688, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f2bcf49a000 mmap(0x7f2bcf49c000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2000) = 0x7f2bcf49c000 mmap(0x7f2bcf49e000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x4000) = 0x7f2bcf49e000 mmap(0x7f2bcf49f000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x4000) = 0x7f2bcf49f000 mmap(0x7f2bcf4a0000, 112, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2bcf4a0000 close(5) = 0 openat(AT_FDCWD, "/lib64/libz.so.1", O_RDONLY|O_CLOEXEC) = 5 read(5, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3605\0\0\0\0\0\0"..., 832) = 832 fstat(5, {st_mode=S_IFREG|0755, st_size=103600, ...}) = 0 mmap(NULL, 102408, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f2bcf480000 mprotect(0x7f2bcf483000, 86016, PROT_NONE) = 0 mmap(0x7f2bcf483000, 57344, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x3000) = 0x7f2bcf483000 mmap(0x7f2bcf491000, 24576, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x11000) = 0x7f2bcf491000 mmap(0x7f2bcf498000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x17000) = 0x7f2bcf498000 mmap(0x7f2bcf499000, 8, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2bcf499000 close(5) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2bcf47e000 openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 5 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\2604\0\0\0\0\0\0"..., 832) = 832 fstat(5, {st_mode=S_IFREG|0755, st_size=625336, ...}) = 0 mmap(NULL, 623176, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f2bcf3e5000 mprotect(0x7f2bcf3e8000, 606208, PROT_NONE) = 0 mmap(0x7f2bcf3e8000, 438272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x3000) = 0x7f2bcf3e8000 mmap(0x7f2bcf453000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x6e000) = 0x7f2bcf453000 mmap(0x7f2bcf47c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x96000) = 0x7f2bcf47c000 close(5) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2bcf3e3000 arch_prctl(ARCH_SET_FS, 0x7f2bcf3e3c80) = 0 mprotect(0x7f2bcf9c0000, 12288, PROT_READ) = 0 mprotect(0x7f2bcf4ea000, 4096, PROT_READ) = 0 mprotect(0x7f2bcf47c000, 4096, PROT_READ) = 0 mprotect(0x7f2bcf498000, 4096, PROT_READ) = 0 mprotect(0x7f2bcf49f000, 4096, PROT_READ) = 0 mprotect(0x7f2bcf4ca000, 4096, PROT_READ) = 0 mprotect(0x7f2bcf506000, 4096, PROT_READ) = 0 mprotect(0x7f2bcf7c4000, 176128, PROT_READ) = 0 mprotect(0x7f2bcf7fe000, 4096, PROT_READ) = 0 mprotect(0x7f2bcf9da000, 4096, PROT_READ) = 0 mprotect(0x7f2bcf9e1000, 4096, PROT_READ) = 0 mprotect(0x7f2bcf9f9000, 8192, PROT_READ) = 0 mprotect(0x7f2bcfad5000, 61440, PROT_READ) = 0 mprotect(0x555cfd2a5000, 4096, PROT_READ) = 0 mprotect(0x7f2bcfb34000, 4096, PROT_READ) = 0 munmap(0x7f2bcfae8000, 128356) = 0 set_tid_address(0x7f2bcf3e3f50) = 30897 set_robust_list(0x7f2bcf3e3f60, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f2bcf4d5c00, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f2bcf4e2a90}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f2bcf4d5ca0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2bcf4e2a90}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_RELATIME}) = 0 statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_RELATIME}) = 0 brk(NULL) = 0x555cfdfdc000 brk(0x555cfdffd000) = 0x555cfdffd000 access("/etc/selinux/config", F_OK) = 0 access("/etc/system-fips", F_OK) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=2998, ...}) = 0 read(5, "# Locale name alias data base.\n#"..., 4096) = 2998 read(5, "", 4096) = 0 close(5) = 0 openat(AT_FDCWD, "/usr/lib/locale/en_US.UTF-8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/locale/en_US.utf8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=369, ...}) = 0 mmap(NULL, 369, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcfb33000 close(5) = 0 openat(AT_FDCWD, "/usr/lib64/gconv/gconv-modules.cache", O_RDONLY) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=26998, ...}) = 0 mmap(NULL, 26998, PROT_READ, MAP_SHARED, 5, 0) = 0x7f2bcfb01000 close(5) = 0 futex(0x7f2bcf9c54dc, FUTEX_WAKE_PRIVATE, 2147483647) = 0 openat(AT_FDCWD, "/usr/lib/locale/en_US.UTF-8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/locale/en_US.utf8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=23, ...}) = 0 mmap(NULL, 23, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcfb00000 close(5) = 0 openat(AT_FDCWD, "/usr/lib/locale/en_US.UTF-8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/locale/en_US.utf8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=59, ...}) = 0 mmap(NULL, 59, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcfaff000 close(5) = 0 openat(AT_FDCWD, "/usr/lib/locale/en_US.UTF-8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/locale/en_US.utf8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=167, ...}) = 0 mmap(NULL, 167, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcfafe000 close(5) = 0 openat(AT_FDCWD, "/usr/lib/locale/en_US.UTF-8/LC_NAME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/locale/en_US.utf8/LC_NAME", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=77, ...}) = 0 mmap(NULL, 77, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcfafd000 close(5) = 0 openat(AT_FDCWD, "/usr/lib/locale/en_US.UTF-8/LC_PAPER", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/locale/en_US.utf8/LC_PAPER", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=34, ...}) = 0 mmap(NULL, 34, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcfafc000 close(5) = 0 openat(AT_FDCWD, "/usr/lib/locale/en_US.UTF-8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/locale/en_US.utf8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 close(5) = 0 openat(AT_FDCWD, "/usr/lib/locale/en_US.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=57, ...}) = 0 mmap(NULL, 57, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcfafb000 close(5) = 0 openat(AT_FDCWD, "/usr/lib/locale/en_US.UTF-8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/locale/en_US.utf8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=286, ...}) = 0 mmap(NULL, 286, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcfafa000 close(5) = 0 openat(AT_FDCWD, "/usr/lib/locale/en_US.UTF-8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/locale/en_US.utf8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=2586930, ...}) = 0 mmap(NULL, 2586930, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcf16b000 close(5) = 0 openat(AT_FDCWD, "/usr/lib/locale/en_US.UTF-8/LC_TIME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/locale/en_US.utf8/LC_TIME", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=3284, ...}) = 0 mmap(NULL, 3284, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcfaf9000 close(5) = 0 openat(AT_FDCWD, "/usr/lib/locale/en_US.UTF-8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/locale/en_US.utf8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=54, ...}) = 0 mmap(NULL, 54, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcfaf8000 close(5) = 0 openat(AT_FDCWD, "/usr/lib/locale/en_US.UTF-8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/locale/en_US.utf8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=340640, ...}) = 0 mmap(NULL, 340640, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcf117000 close(5) = 0 openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=2962, ...}) = 0 fstat(5, {st_mode=S_IFREG|0644, st_size=2962, ...}) = 0 read(5, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\r\0\0\0\r\0\0\0\0"..., 4096) = 2962 lseek(5, -1863, SEEK_CUR) = 1099 read(5, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\r\0\0\0\r\0\0\0\0"..., 4096) = 1863 close(5) = 0 futex(0x7f2bcf9db170, FUTEX_WAKE_PRIVATE, 2147483647) = 0 futex(0x7f2bcf9db010, FUTEX_WAKE_PRIVATE, 2147483647) = 0 futex(0x7f2bcfae4000, FUTEX_WAKE_PRIVATE, 2147483647) = 0 futex(0x7f2bcfae51f0, FUTEX_WAKE_PRIVATE, 2147483647) = 0 stat("/etc/krb5.conf", {st_mode=S_IFREG|0644, st_size=812, ...}) = 0 openat(AT_FDCWD, "/etc/krb5.conf", O_RDONLY) = 5 fcntl(5, F_SETFD, FD_CLOEXEC) = 0 fstat(5, {st_mode=S_IFREG|0644, st_size=812, ...}) = 0 read(5, "# To opt out of the system crypt"..., 4096) = 812 openat(AT_FDCWD, "/etc/krb5.conf.d/", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 6 fstat(6, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 getdents64(6, /* 5 entries */, 32768) = 168 getdents64(6, /* 0 entries */, 32768) = 0 close(6) = 0 openat(AT_FDCWD, "/etc/krb5.conf.d//crypto-policies", O_RDONLY) = 6 fstat(6, {st_mode=S_IFREG|0644, st_size=179, ...}) = 0 read(6, "[libdefaults]\npermitted_enctypes"..., 4096) = 179 read(6, "", 4096) = 0 close(6) = 0 openat(AT_FDCWD, "/etc/krb5.conf.d//kcm_default_ccache", O_RDONLY) = 6 fstat(6, {st_mode=S_IFREG|0644, st_size=494, ...}) = 0 read(6, "# This file should normally be i"..., 4096) = 494 read(6, "", 4096) = 0 close(6) = 0 openat(AT_FDCWD, "/etc/krb5.conf.d//redhat-idm.conf", O_RDONLY) = 6 fstat(6, {st_mode=S_IFREG|0664, st_size=1058, ...}) = 0 read(6, "[libdefaults]\n default_realm = "..., 4096) = 1058 read(6, "", 4096) = 0 close(6) = 0 read(5, "", 4096) = 0 close(5) = 0 futex(0x7f2bcf9db028, FUTEX_WAKE_PRIVATE, 2147483647) = 0 futex(0x7f2bcf4cc2e8, FUTEX_WAKE_PRIVATE, 2147483647) = 0 openat(AT_FDCWD, "/proc/thread-self/attr/fscreate", O_RDONLY|O_CLOEXEC) = 5 read(5, "", 4095) = 0 close(5) = 0 openat(AT_FDCWD, "/etc/selinux/config", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=548, ...}) = 0 read(5, "\n# This file controls the state "..., 4096) = 548 read(5, "", 4096) = 0 close(5) = 0 futex(0x7f2bcf4cd540, FUTEX_WAKE_PRIVATE, 2147483647) = 0 stat("/etc/selinux/targeted/contexts/files/file_contexts", {st_mode=S_IFREG|0644, st_size=398917, ...}) = 0 openat(AT_FDCWD, "/etc/selinux/targeted/contexts/files/file_contexts.subs_dist", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=625, ...}) = 0 fstat(5, {st_mode=S_IFREG|0644, st_size=625, ...}) = 0 read(5, "/run /var/run\n/run/lock /var/loc"..., 4096) = 625 read(5, "", 4096) = 0 close(5) = 0 openat(AT_FDCWD, "/etc/selinux/targeted/contexts/files/file_contexts.subs", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 fstat(5, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 read(5, "", 4096) = 0 close(5) = 0 stat("/etc/selinux/targeted/contexts/files/file_contexts", {st_mode=S_IFREG|0644, st_size=398917, ...}) = 0 stat("/etc/selinux/targeted/contexts/files/file_contexts.bin", {st_mode=S_IFREG|0644, st_size=562297, ...}) = 0 openat(AT_FDCWD, "/etc/selinux/targeted/contexts/files/file_contexts.bin", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=562297, ...}) = 0 read(5, "\212\377|\371\5\0\0\0\20\0\0\00010.34 2019-11-21\6\0\0\0"..., 4096) = 4096 lseek(5, 0, SEEK_SET) = 0 mmap(NULL, 562297, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcf08d000 brk(NULL) = 0x555cfdffd000 brk(0x555cfe039000) = 0x555cfe039000 brk(NULL) = 0x555cfe039000 brk(0x555cfe05a000) = 0x555cfe05a000 mmap(NULL, 491520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2bcf015000 mremap(0x7f2bcf015000, 491520, 983040, MREMAP_MAYMOVE) = 0x7f2bcef25000 close(5) = 0 stat("/etc/selinux/targeted/contexts/files/file_contexts.homedirs", {st_mode=S_IFREG|0644, st_size=13938, ...}) = 0 stat("/etc/selinux/targeted/contexts/files/file_contexts.homedirs.bin", {st_mode=S_IFREG|0644, st_size=19162, ...}) = 0 openat(AT_FDCWD, "/etc/selinux/targeted/contexts/files/file_contexts.homedirs.bin", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=19162, ...}) = 0 read(5, "\212\377|\371\5\0\0\0\20\0\0\00010.34 2019-11-21\6\0\0\0"..., 4096) = 4096 lseek(5, 0, SEEK_SET) = 0 mmap(NULL, 19162, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcfaf3000 close(5) = 0 stat("/etc/selinux/targeted/contexts/files/file_contexts.local", {st_mode=S_IFREG|0644, st_size=345, ...}) = 0 stat("/etc/selinux/targeted/contexts/files/file_contexts.local.bin", {st_mode=S_IFREG|0644, st_size=430, ...}) = 0 openat(AT_FDCWD, "/etc/selinux/targeted/contexts/files/file_contexts.local.bin", O_RDONLY|O_CLOEXEC) = 5 fstat(5, {st_mode=S_IFREG|0644, st_size=430, ...}) = 0 read(5, "\212\377|\371\5\0\0\0\20\0\0\00010.34 2019-11-21\6\0\0\0"..., 4096) = 430 lseek(5, 0, SEEK_SET) = 0 mmap(NULL, 430, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f2bcfaf2000 close(5) = 0 mmap(NULL, 782336, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2bcee66000 munmap(0x7f2bcef25000, 983040) = 0 brk(NULL) = 0x555cfe05a000 brk(0x555cfe07b000) = 0x555cfe07b000 access("/var/run/setrans/.setrans-unix", F_OK) = -1 ENOENT (No such file or directory) futex(0x7f2bcf4cd5d0, FUTEX_WAKE_PRIVATE, 2147483647) = 0 openat(AT_FDCWD, "/proc/thread-self/attr/current", O_RDONLY|O_CLOEXEC) = 5 read(5, "unconfined_u:unconfined_r:unconf"..., 4095) = 54 close(5) = 0 openat(AT_FDCWD, "/proc/thread-self/attr/fscreate", O_RDWR|O_CLOEXEC) = 5 write(5, "unconfined_u:object_r:device_t:s"..., 34) = 34 close(5) = 0 openat(AT_FDCWD, "/dev/stderr", O_WRONLY|O_CREAT|O_APPEND, 0600) = 5 openat(AT_FDCWD, "/proc/thread-self/attr/fscreate", O_RDWR|O_CLOEXEC) = 6 write(6, NULL, 0) = 0 close(6) = 0 munmap(0x7f2bcee66000, 782336) = 0 munmap(0x7f2bcfaf2000, 430) = 0 munmap(0x7f2bcfaf3000, 19162) = 0 munmap(0x7f2bcf08d000, 562297) = 0 getpid() = 30897 socket(AF_UNIX, SOCK_STREAM, 0) = 6 connect(6, {sa_family=AF_UNIX, sun_path="/var/run/.heim_org.h5l.kcm-socket"}, 110) = -1 ECONNREFUSED (Connection refused) close(6) = 0 openat(AT_FDCWD, "/usr/share/locale/en_US.UTF-8/LC_MESSAGES/mit-krb5.mo", O_RDONLY) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/share/locale/en_US.utf8/LC_MESSAGES/mit-krb5.mo", O_RDONLY) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/share/locale/en_US/LC_MESSAGES/mit-krb5.mo", O_RDONLY) = 6 fstat(6, {st_mode=S_IFREG|0644, st_size=369, ...}) = 0 mmap(NULL, 369, PROT_READ, MAP_PRIVATE, 6, 0) = 0x7f2bcfaf7000 close(6) = 0 openat(AT_FDCWD, "/usr/share/locale/en.UTF-8/LC_MESSAGES/mit-krb5.mo", O_RDONLY) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/share/locale/en.utf8/LC_MESSAGES/mit-krb5.mo", O_RDONLY) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/share/locale/en/LC_MESSAGES/mit-krb5.mo", O_RDONLY) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/share/locale/en_US.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/share/locale/en_US.utf8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/share/locale/en_US/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/share/locale/en.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/share/locale/en.utf8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/share/locale/en/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory) write(2, "klist: Connection refused ", 26klist: Connection refused ) = 26 write(2, "while resolving ccache", 22while resolving ccache) = 22 write(2, "\n", 1 ) = 1 exit_group(1) = ? +++ exited with 1 +++
The important line of the strace is: connect(6, {sa_family=AF_UNIX, sun_path="/var/run/.heim_org.h5l.kcm-socket"}, 110) = -1 ECONNREFUSED (Connection refused) which I assume implies KCM isn't running. Sumit also requested journalctl output I believe; can you provide that?
Hi, additionally, what's the output of systemctl status sssd-kcm.socket and systemctl status sssd-kcm.service bye, Sumit
I have update my system on the last fedora stable release so fedora 32 and now that works correctly.
(In reply to mbollo from comment #4) > Hi, > > I have the same error. I have tried to restart but I have still the error: > > ~ » KRB5_TRACE=/dev/stderr > ~ » klist > klist: Connection refused while resolving ccache > ~ » kinit > kinit: Connection refused while getting default ccache > ~ » kdestroy > kdestroy: Connection refused while resolving ccache > IMHO krb5-libs should improve error reporting in case of communication with kcm server. e.g. klist: Connection refused while resolving ccache. KCM server is unresponsive or klist: Connection refused while resolving ccache. KCM server is not running
Hi Lukas, please don't move other people's bugs around. Thanks!
(In reply to Robbie Harwood from comment #12) > Hi Lukas, please don't move other people's bugs around. Thanks! Wold you prefer to create another one for krb5? I can clone it. There is nothing what sssd can do here. And improving log message in krb5 would simplify life for many users.
Yes, please follow normal bugtracker process if you believe that's an issue.
(In reply to Robbie Harwood from comment #14) > Yes, please follow normal bugtracker process if you believe that's an issue. This BZ was previously assigned to krb5 so it is normal to reassign back. Especially, if it is not possible to solve it in currently assigned component. But I can create another BZ if you prefer that way.
The bug tracks an issue where KCM is not running as explained in #c4. Getting KCM running consistently is a different problem than what krb5 chooses to log or not. It is normal to reassign back *when the issue the ticket is about changes affected component*. This ticket is about the issue in #c4.
(In reply to Robbie Harwood from comment #16) > The bug tracks an issue where KCM is not running as explained in #c4. > Getting KCM running consistently is a different problem than what krb5 > chooses to log or not. > > It is normal to reassign back *when the issue the ticket is about changes > affected component*. This ticket is about the issue in #c4. Comment 4 does not say anything why sssd-kcm is not running. It is obvious that sssd-kcm was installed on the system otherwise file /etc/krb5.conf.d/kcm_default_ccache would not exist and `klist`/`kinit` would not try to connect to the unix socket /run/.heim_org.h5l.kcm-socket There might be many reasons . sssd-kcm.socket is not enabled due to various reasons even thought is is enabled by default. sh# grep sssd-kcm /usr/lib/systemd/system-preset/* /usr/lib/systemd/system-preset/90-default.preset:enable sssd-kcm.socket But there is nothing what an be done on sssd here if other components works as expected (systemd presets, systemd socket activation, selinux policy) systemd will start sssd-kcm even in case of random crash. So far nobody provided more data. And strace output is only from client code which is in krb5 and not in sssd. More experienced fedora users could try to find out why some daemon is not running but but output of klist/kinit is so confusing that they will blame krb5. This is also a reason why bug was initially filed to krb5 component.
Fedora 30 changed to end-of-life (EOL) status on 2020-05-26. Fedora 30 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of Fedora please feel free to reopen this bug against that version. If you are unable to reopen this bug, please file a new report against the current release. If you experience problems, please add a comment to this bug. Thank you for reporting this bug and we are sorry it could not be fixed.
Is there a resolution for this? I just upgraded to sssd-kcm-2.5.1-1.fc35.x86_64 and it failed in exactly the same way. Using strace shows: 509829 connect(4, {sa_family=AF_UNIX, sun_path="/var/run/.heim_org.h5l.kcm-socket"}, 110) = -1 ECONNREFUSED (Connection refused)
The actual failure is: /usr/libexec/sssd/sssd_kcm: undefined symbol: krb5_unmarshal_credentials, version krb5_3_MIT Maybe there's a missing dependency?
For future readers, the solution is to update krb5-libs
(In reply to Richard W.M. Jones from comment #21) > For future readers, the solution is to update krb5-libs Hi, thanks for the details, so it looks we need an explicit Requires to make sure the required krb5-libs is installed during individual updates as well. Pavel, do you agree? bye, Sumit
Yes. Justin, can you please submit PR against SSSD?
Upstream PR: https://github.com/SSSD/sssd/pull/5685
Thank you Richard for the insight. Robbie - are you able to help with the changes to krb5 requested in https://github.com/SSSD/sssd/pull/5685 ?
(For clarity: the changes in question appear to be symbol versioning.) The short answer is no, I don't plan to add the functionality requested because it doesn't help. The longer answer is that, as far as I can tell, it would make backports of this type impossible. Symbol versioning like that assumes not only that every member of the group will be added together, but also that all previous groups will be added. So, for instance, say I backport something from the (hypothetical, corresponding to a future release) 1_20_0 set - as I've done here, with functions slated for landing in krb5-1.20. This has the following consequences: 1. I need to backport everything else that is added to 1_20_0, since that's the interface claimed. 2. That won't avoid the problem here, because if a function is added, the claimed interface version won't change. 3. I'm bound to backport everything from before 1_20_0 as well - if we were on 1_18_2 (Fedora 33 has 1.18.2), this would entail everything in 1_18_3, 1_19, ... 4. Our upstream patch releases get hairy. If a function is added to 1.18.3, that would presumably go in 1_18_3 - but it would also have been added to 1_19_Z, so now what's in what becomes gross. So what we're left with is that I'd add a non-public symbol - and we'd be right back here because anyone who wanted to use it would need to add a version dependency. The preferred way is to update a minimum krb5-libs version that has the functionality one needs, since we have to coordinate the changes anyway. This is how we've been working, for instance, with symbols and functionality needed by freeipa.
(In reply to Robbie Harwood from comment #26) > (For clarity: the changes in question appear to be symbol versioning.) > > The short answer is no, I don't plan to add the functionality requested > because it doesn't help. > > The longer answer is that, as far as I can tell, it would make backports of > this type impossible. Symbol versioning like that assumes not only that > every member of the group will be added together, but also that all previous > groups will be added. So, for instance, say I backport something from the > (hypothetical, corresponding to a future release) 1_20_0 set - as I've done > here, with functions slated for landing in krb5-1.20. This has the > following consequences: > > 1. I need to backport everything else that is added to 1_20_0, since that's > the interface claimed. > 2. That won't avoid the problem here, because if a function is added, the > claimed interface version won't change. > 3. I'm bound to backport everything from before 1_20_0 as well - if we were > on 1_18_2 (Fedora 33 has 1.18.2), this would entail everything in 1_18_3, > 1_19, ... Yes, as a general rule you really don't want to be doing downstream API backports when symbol versioning is involved. I'd actually go further and say you don't want to be doing downstream API backports regardless, because it messes up people relying on 'pkg-config' version checks. eg 'pkg-config >= krb-1.20' as a condition to use a new API is not satisfied if you backported the symbol it to 1.18 downstream. I mentioned these problems when documenting what we did for libvirt https://www.berrange.com/posts/2011/01/13/versioning-in-the-libvirt-library/ > 4. Our upstream patch releases get hairy. If a function is added to 1.18.3, > that would presumably go in 1_18_3 - but it would also have been added to > 1_19_Z, so now what's in what becomes gross. If you must add new APIs to upstream stable releases, then as long as you add the API to the oldest stable release first you don't have to duplicate it in multiple sym version sections. You would just add the '1_18_3' symbol version section to all your release streams - 1.18.3, 1.19.x, 1.20.x. Still not especially nice though, because best practice would be to add APIs to the git master stream first. So you would indeed end up with the same symbol in multiple version sections. Basically goes back to the same problem - you don't want to be backporting APIs when using symbol versioning. > The preferred way is to update a minimum krb5-libs version that has the > functionality one needs, since we have to coordinate the changes anyway. > This is how we've been working, for instance, with symbols and functionality > needed by freeipa. The way we avoid the problems in libvirt is that we simply never add new APIs anywhere except git master. We'll never backport new APIs to stable release branches upstream, nor to downstream. It is less pain to simply rebase to the newest release instead, which is never more than 4-6 weeks away with libvirts release schedule. If you can manage this strict no API backports rule though, symbol versioning is quite nice and makes deps "just work" at the RPM level, with ELF applications.
This bug appears to have been reported against 'rawhide' during the Fedora 35 development cycle. Changing version to 35.
Fixed: https://src.fedoraproject.org/rpms/sssd/blob/f35/f/sssd.spec#_472