On 25.05.22 16:27, Ronald Wimmer via FreeIPA-users wrote:
On 25.05.22 09:26, Ronald Wimmer via FreeIPA-users wrote:
On 24.05.22 23:47, Ronald Wimmer via FreeIPA-users wrote:
Today I tried to update one of our Keycloaks from version 12 to 18.
Everything looked good except Kerberos login. I am using the exact
same keytab file I used in KC version 12 but in version 18 I do get
this:
May 24 23:18:36 kc001.linux.mydomain.at kc.sh[8164]: 2022-05-24
23:18:36,996 WARN
[org.keycloak.federation.kerberos.impl.SPNEGOAuthenticator]
(executor-thread-2) SPNEGO login failed:
java.security.PrivilegedActionException: GSSException: Failure
unspecified at GSS-API level (Mechanism level: Checksum failed)
Any ideas what might be the cause?
After I reverted to the snapshot I took before the same problem
appeared. Obviously, it has nothing to do with the Keycloak update. I
need to investigate where the "checksum failed" error comes from.
After freeing Firefox from its snap prison I tried again and the problem
vanished. This is just a coincidence as I verified the problem from a
windows host yesterday.
What I really need to know is what can cause such a checksum error? Any
ideas?
I read something that enabling preauth could help in such authentication
matters but honestly I doubt that.
Has anyone had similar problems and could point me in the right direction?
Cheers,
Ronald
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
