Hey Manuel, Im working with Citrix on almost the exact same issue. I found setting this regkey for the Linux VDA solves my issue.
"/opt/Citrix/VDA/bin/ctxreg create -k "HKLM\Software\Citrix\VirtualDesktopAgent\Authentication\UserCredentialService" -t "REG_SZ" -v "DigestMethod" -d "SHA256" --force" -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/2098484 Title: Pkinit fails with invalid argument Status in krb5 package in Ubuntu: Incomplete Bug description: Hello, I am trying to setup a new Linux Citrix VDI on Ubuntu 24.04 with FAS (https://docs.citrix.com/en-us/linux-virtual-delivery-agent/current- release/configure/authentication/federated-authentication-service). For this the packages krb5-pkinit and libpam-krb5 are required. Unfortunately the login process fails with the following error message: Preauth module pkinit (16) (real) returned: 22/Invalid argument For the authentication process the following pam module from Citrix is used: #Linux VDA Federated Authentication# #%PAM-1.0 #pam auth auth sufficient pam_krb5.so try_pkinit preauth_opt=X509_user_identity=PKCS11:/usr/lib/x86_64-linux-gnu/libctxpkcs11.so @include common-auth #pam account account sufficient pam_krb5.so @include common-account #pam password password sufficient pam_krb5.so @include common-password #pam session session optional pam_krb5.so @include common-session package versions: krb5-pkinit:amd64 1.20.1-6ubuntu2.4 libpam-krb5:amd64 4.11-1build3 Is it possible, that on of the arguments inside the pam module is not correct? The same process (the servers are setup via Ansible) is working on a 22.04 machine, logically with other package versions. -------------- 1) lsb_release -rd: No LSB modules are available. Description: Ubuntu 24.04.2 LTS Release: 24.04 2) apt-cache policy krb5-pkinit krb5-pkinit: Installed: 1.20.1-6ubuntu2.4 Candidate: 1.20.1-6ubuntu2.4 Thank you! Regards, Manuel To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/2098484/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
