On ma, 03 elo 2020, Николай Савельев via FreeIPA-users wrote:
Hi. I'm twsting ubuntu 20.04 in freeipa domain with smbclient. In some cases it works (fresh installation of xubuntu, for example), in other - dont (upgrade kubuntu from 18.04). Failed to resolve credential cache 'KEYRING:persistent:15000'! (Unknown credential cache type) free(): double free detected in tcache 2 Аварийный останов (стек памяти сброшен на диск) In first case i have ticket: Ticket cache: FILE:/tmp/krb5cc_15000 Default principal: myname@mydomain Valid starting Expires Service principal 03.08.2020 11:00:23 04.08.2020 11:00:20 krbtgt/ In second: icket cache: KEYRING:persistent:15000:krb_ccache_si1oSwz Default principal: myname@mydomain Valid starting Expires Service principal 03.08.2020 09:18:56 04.08.2020 09:18:56 krbtgt/ Why? I have #default_ccache_name = KEYRING:persistent:%{uid} in krb5.conf
Check which Kerberos library is in use in both cases to compile Samba. There are two of them and Samba on Debian/Ubuntu is compiled with Heimdal Kerberos while you might have MIT Kerberos utilities (kinit, etc.) installed. Both Kerberos implemenations can interoperate over network but they have different local properties. In particular, there are different types of credential caches supported, Heimdal has no support for KEYRING type. This means if you want to use an application compiled against Heimdal, you need to use only those ccache types that are supported by Heimdal. In this case sticking to FILE:.. type is what you need. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
