Hi,
Before I recently upgraded my CentOS 8 Stream masters I was able
to automatically login using the Kerberos ticket.
On the older (CentOS 7) that still works. But not on the two newer
systems.
Everytime I refresh the login page a new file is created in /run/ipa/ccaches
And the following shows up in the log.
jul 13 14:49:36
iparep4.example.com [577]: GSSAPI client step 1
jul 13 14:49:36
iparep4.example.com [577]: GSSAPI client step 1
jul 13 14:49:36
iparep4.example.com [577]: GSSAPI Error: Unspecified GSS failure. Minor
code may provide more information (Credential cache is empty)
jul 13 14:49:37
iparep4.example.com [576]: GSSAPI client step 1
jul 13 14:49:37
iparep4.example.com [576]: GSSAPI client step 1
jul 13 14:49:37
iparep4.example.com [576]: GSSAPI Error: Unspecified GSS failure. Minor
code may provide more information (Credential cache is empty)
Logging with a username and password still works, but not the
automatic Kerberos login.
How can I debug this further?
--
Kees