1:06 a.m.
On ma, 03 elo 2020, Николай Савельев via FreeIPA-users wrote:
Hi. I'm twsting ubuntu 20.04 in freeipa domain with smbclient.
In some cases it works (fresh installation of xubuntu, for example), in
other - dont (upgrade kubuntu from 18.04).
Failed to resolve credential cache 'KEYRING:persistent:15000'! (Unknown
credential cache type)
free(): double free detected in tcache 2
Аварийный останов (стек памяти сброшен на диск)
In first case i have ticket:
Ticket cache: FILE:/tmp/krb5cc_15000
Default principal: myname@mydomain
Valid starting Expires Service principal
03.08.2020 11:00:23 04.08.2020 11:00:20 krbtgt/
In second:
icket cache: KEYRING:persistent:15000:krb_ccache_si1oSwz
Default principal: myname@mydomain
Valid starting Expires Service principal
03.08.2020 09:18:56 04.08.2020 09:18:56 krbtgt/
Why?
I have
#default_ccache_name = KEYRING:persistent:%{uid}
in krb5.conf
Check which Kerberos library is in use in both cases to compile Samba.
There are two of them and Samba on Debian/Ubuntu is compiled with
Heimdal Kerberos while you might have MIT Kerberos utilities (kinit,
etc.) installed.
Both Kerberos implemenations can interoperate over network but they have
different local properties. In particular, there are different types of
credential caches supported, Heimdal has no support for KEYRING type.
This means if you want to use an application compiled against Heimdal,
you need to use only those ccache types that are supported by Heimdal.
In this case sticking to FILE:.. type is what you need.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland