On 25.05.22 09:26, Ronald Wimmer via FreeIPA-users wrote:
On 24.05.22 23:47, Ronald Wimmer via FreeIPA-users wrote:
Today I tried to update one of our Keycloaks from version 12 to 18. Everything looked good except Kerberos login. I am using the exact same keytab file I used in KC version 12 but in version 18 I do get this:

May 24 23:18:36 kc001.linux.mydomain.at kc.sh[8164]: 2022-05-24 23:18:36,996 WARN [org.keycloak.federation.kerberos.impl.SPNEGOAuthenticator] (executor-thread-2) SPNEGO login failed: java.security.PrivilegedActionException: GSSException: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)

Any ideas what might be the cause?

After I reverted to the snapshot I took before the same problem appeared. Obviously, it has nothing to do with the Keycloak update. I need to investigate where the "checksum failed" error comes from.

After freeing Firefox from its snap prison I tried again and the problem vanished. This is just a coincidence as I verified the problem from a windows host yesterday.

What I really need to know is what can cause such a checksum error? Any ideas?

Cheers,
Ronald
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to