> This is my main suspect. If you are generating it manually, it will
not be in desktop's environment.
You mean that the 'KRB5CCNAME' environment variable won't be set?
Indeed, that environment variable is not set. The system relies on the
configuration files in '/etc/krb5.conf' and '/etc/krb5.conf.d/*.conf',
with contents:
[libdefaults]
default_cache_name = FILE:/tmp/krb5cc_%{uid}
The configuration files appear to be readable in the sandbox, but I'm
not seeing the ticket available there even after running 'kinit' outside
of the sandbox and then 'snap connect firefox:kerberos-tickets'.
> So please try to get authenticated by the server by using <email
address hidden> in the log-in screen (GDM).
These systems aren't domain-joined, so a ticket is not created by
logging in, which I think is what you're expecting to happen. I can't
login with my external e-mail, just as a local user.
> If it also fails, please share the output of...
wtcline@wtcline-desk20:~$ snap run --shell firefox -c 'env|grep KRB'
wtcline@wtcline-desk20:~$
This is what I expect, since the ticket location is supposed to be read
from the krb5.conf files in '/etc' if the environment variable isn't
set. Does the 'firefox:kerberos-tickets' plug allow access to tickets
in '/tmp'?
Either way, I think the issue establishing HTTPS connection must first
be solved before I can really test Kerberos with this Snap. Is there
some prerequisite reading I should go through before trying to test the
Firefox snap package?
> And thank you for your willingness to give this a go.
And thank you for working on a fix!
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1849346
Title:
[SRU] kerberos GSSAPI no longer works after deb->snap transition
To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/1849346/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
