From nobody Wed Dec 21 03:30:36 2022 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4NcJqc4mfkz1Ghsl for ; Wed, 21 Dec 2022 03:30:36 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4NcJqc2dR4z4DZ0 for ; Wed, 21 Dec 2022 03:30:36 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1671593436; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=oue1rd99ONEeoff2PooDgtIppQJVBmLf+jHh684lQms=; b=EEVYYo3PIIzK2llaRsEYdOVLgsOFhfZ7wE8ShYrrNCFm/jZvRdMrysPMUIRhM+PZY3ZRWx LAXsUC1FpbtqH+uegS6IJ3d/qprGrY82UTcJ3k4e5oIrupDr7BOH2Bsyr1uVTdJs3HabkH WQqr+skEIWdmsLWbTE7nfBW0YKgoHxu7OskfW3Ft03COYq8crvGI95xEGVHC2RU1DLh5ZL 0qIIIqDzYIaakZ0EfQECf7DxpzIOFZPKoKsDHM+W4u42bbSIoa6iRZ6UlW+uX3Fb3vwG5z WiheW/n+GQSGeDqOeBI3PrnLghklNE8l0VPvaSv50p9JxNUx/yJsbN4DsQyIBA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1671593436; a=rsa-sha256; cv=none; b=U0Lu9NDUzvyoaeaBHsUVNTO7okyijzepiL4InpmhPtx+dV38OjDxvSMZl87ddGu4OSxLm2 rvk0z60NT1vS1I4u8SpxkZ9y9MZ9i2ORJlUpjMqmhg5VBAK2BIRHZrTdjl/p2xqgiZlLTP 1phecwmSfCUs5mCDuKNNn1/gLTwAhMYK4bFwR5L/0l2LDZuOoaFOyG74uD3XwA7els6DcX /aLtmlXYvsIJSE/RRDoyZiGE4zlr664GMFsTmoMLGI4oJc9C+MmNwlHof33c95+l5wr1BE zkRFJ+QB4pkDWwnAIPdCzfJLZq3eRGFnq5b9377am7NQggHVk1kgFTjDmYSB4g== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4NcJqc1jW8z10Vd for ; Wed, 21 Dec 2022 03:30:36 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 2BL3UaoH012478 for ; Wed, 21 Dec 2022 03:30:36 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 2BL3Ua3W012477 for bugs@FreeBSD.org; Wed, 21 Dec 2022 03:30:36 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 268186] Kerberos authentication fails with a Linux/FreeIPA KDC Date: Wed, 21 Dec 2022 03:30:36 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: bin X-Bugzilla-Version: Unspecified X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: amendlik@gmail.com X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D268186 --- Comment #39 from amendlik@gmail.com --- (In reply to Cy Schubert from comment #38) I never said I couldn't apply a patch, only that I had never done it before= . I also build my own ports, so I'm not sure why it's important that I'm a bina= ry package user. I'm open to try any suggestion. I am just having a very hard = time following the conversation because it's not clear to me how you are reaching your conclusions. My research shows that we need to use OpenSSH with GSSAPI to use service ti= cket based-authentication. But I see you saying that we need to disable GSSAPI a= nd use PAM instead. I provided the documentation that says PAM is not what we need, so it would be helpful if you could explain your thoughts on this or = tell me what I'm missing. BTW, I have downloaded the source code and applied the patch. I still need = to figure out how to "activate" it, and the rest should be pretty easy. --=20 You are receiving this mail because: You are the assignee for the bug.=